EUVD-2022-25945

Malicious code in bioql PyPI...

EUVD-2022-50086

Malicious code in bioql PyPI...

EUVD-2021-28316

Malicious code in bioql PyPI...

EUVD-2022-51234

Malicious code in bioql PyPI...

EUVD-2021-30329

Malicious code in bioql PyPI...

EUVD-2023-23768

Malicious code in bioql PyPI...

EUVD-2023-26613

Malicious code in bioql PyPI...

EUVD-2023-29708

Malicious code in bioql PyPI...

EUVD-2025-6744

Malicious code in bioql PyPI...

EUVD-2021-9367

Malicious code in bioql PyPI...

EUVD-2023-54659

Malicious code in bioql PyPI...

EUVD-2021-28029

Malicious code in bioql PyPI...

EUVD-2025-25903

Malicious code in bioql PyPI...

CVE-2025-56694

Client-side password validation CWE-602 in lumasoft fotoShare Cloud 2025-03-13 allowing unauthenticated attackers to view password-protected photo albums...

CVE-2025-56694

Client-side password validation CWE-602 in lumasoft fotoShare Cloud 2025-03-13 allowing unauthenticated attackers to view password-protected photo albums...

CVE-2025-56694

The lumasoft fotoShare Cloud version 2025-03-13 is vulnerable to a client-side password validation flaw (CWE-602). This issue allows unauthenticated attackers to bypass security controls and view password-protected photo albums . While the vulnerability's impact is high, the provided documentatio...

lumasoft fotoShare Cloud 安全漏洞

Lumasoft FotoShare Cloud is a cloud-based gallery service from Lumasoft. A security vulnerability exists in lumasoft fotoShare Cloud version 2025-03-13, which stems from improper client-side password validation and could lead to unauthorized access...

CVE-2025-56694: Client-Side Enforcement of Server-Side Security

Client-side password validation CWE-602 in lumasoft fotoShare Cloud 2025-03-13 allowing unauthenticated attackers to view password-protected photo albums...

CVE-2025-54336

In Plesk Obsidian 18.0.70, isAdminPasswordValid uses an == comparison. Thus, if the correct password is "0e" followed by any digit string, then an attacker can login with any other string that evaluates to 0.0 such as the 0e0 string. This occurs in admin/plib/LoginManager.php...

Plesk Obsidian 安全漏洞

Plesk Obsidian is a hosting control panel from the Swiss company Plesk. A security vulnerability exists in Plesk Obsidian version 18.0.70, which stems from the use of the == comparison by isAdminPasswordValid and could lead to bypassing authentication...