EUVD-2021-7151

Malicious code in bioql PyPI...

EUVD-2025-31747

Malicious code in bioql PyPI...

EUVD-2025-30311

Malicious code in bioql PyPI...

EUVD-2022-30476

Malicious code in bioql PyPI...

EUVD-2022-49209

Malicious code in bioql PyPI...

EUVD-2025-25225

Malicious code in bioql PyPI...

EUVD-2021-7105

Malicious code in bioql PyPI...

EUVD-2021-7150

Malicious code in bioql PyPI...

Joomla! 4.x < 4.4.14 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.x prior to 4.4.14 or 5.x prior to 5.3.4. It is, therefore, affected by multiple vulnerabilities. - Inadequate content filtering within the checkAttribute methods leads to XSS vulnerabilities in...

Joomla! 5.x < 5.3.4 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.x prior to 4.4.14 or 5.x prior to 5.3.4. It is, therefore, affected by multiple vulnerabilities. - Inadequate content filtering within the checkAttribute methods leads to XSS vulnerabilities in...

CVE-2025-54477

Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method...

Joomla! User Enumeration Vulnerability (20250902)

Joomla! is prone to a user enumeration vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:joomla:joomla"; ifdescripti...

CVE-2025-54477

Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method...

CVE-2025-54477 Joomla! Core - [20250902] User-Enumeration in passkey authentication method

Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method...

CVE-2025-54477 Joomla! Core - [20250902] User-Enumeration in passkey authentication method

Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method...

CVE-2025-54477

CVE-2025-54477 describes an issue in Joomla! where the authentication request handling in the passkey method allows user enumeration. The initial entry cites an improper handling of authentication requests leading to a user enumeration vector, with a CVSS v3.1 base score of 5.3 (Network attack, n...

PT-2025-40004

Name of the Vulnerable Software and Affected Versions affected versions not specified Description Improper handling of authentication requests results in a user enumeration vector within the passkey authentication method. This allows an attacker to potentially identify valid users. Recommendation...

Joomla 4.0.x < 4.4.14 / 5.0.x < 5.3.4 Joomla 5.3.4 Security & Bugfix Release (5936-joomla-5-3-4-security-bugfix-release)

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.0.x prior to 4.4.14 or 5.0.x prior to 5.3.4. It is, therefore, affected by a vulnerability. - Improper handling of authentication requests lead to a user enumeration vector in the passkey...

CVE-2025-10305

The Secure Passkeys plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the deletepasskey and passkeyslist function in all versions up to, and including, 1.2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, t...

PT-2025-38630

Name of the Vulnerable Software and Affected Versions Secure Passkeys plugin for WordPress versions up to and including 1.2.1 Description The Secure Passkeys plugin for WordPress is susceptible to unauthorized access due to a missing capability check within the delete passkey and passkeys list...