113 matches found
CVE-2025-28355
CVE-2025-28355 Se identificó que la aplicación https://github.com/Volmarg/personal-management-system es vulnerable a ataques CSRF, una de las muchas acciones que un atacante puede realizar es engañar a un usuario legítimo para que ejecute una solicitud de sitio cruzado que alterará su contraseña,...
CVE-2023-43838
CVE-2023-43838 Una vulnerabilidad de carga arbitraria de archivos en Personal Management System v1.4.64 permite a los atacantes ejecutar código arbitrario mediante la carga de un archivo SVG manipulado como avatar del perfil de un usuario. Información adicional 1. Cree alert.svg con el siguiente...
CVE-2026-40526
Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/path endpoint. The path route parameter is passed directly to filegetcontents without...
EUVD-2026-67124
Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/path endpoint. The path route parameter is passed directly to filegetcontents without...
CVE-2026-40526 Volmarg Personal Management System Path Traversal via get-file Endpoint
Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/path endpoint. The path route parameter is passed directly to filegetcontents without...
PT-2026-82538
Name of the Vulnerable Software and Affected Versions Volmarg Personal Management System affected versions not specified Description Authenticated attackers can read arbitrary files by providing absolute filesystem paths to the 'GET /public/get-file/path' endpoint. This occurs because the path...
CVE-2026-40526: Improper Limitation of a Pathname to a Restricted Directory
Volmarg Personal Management System contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying absolute filesystem paths to the GET /public/get-file/path endpoint. The path route parameter is passed directly to filegetcontents without...
CVE-2023-43838
An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar...
EUVD-2025-11801
Malicious code in bioql PyPI...
EUVD-2025-12364
Malicious code in bioql PyPI...
EUVD-2025-12366
Malicious code in bioql PyPI...
EUVD-2025-12206
Malicious code in bioql PyPI...
EUVD-2023-48201
Malicious code in bioql PyPI...
EUVD-2025-11798
Malicious code in bioql PyPI...
EUVD-2023-37550
Malicious code in bioql PyPI...
EUVD-2024-26329
Malicious code in bioql PyPI...
EUVD-2025-12265
Malicious code in bioql PyPI...
CVE-2024-29318
Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting XSS via upload of a SVG file with embedded javascript code...
CVE-2024-29319
Volmarg Personal Management System 1.4.64 is vulnerable to SSRF Server Side Request Forgery via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls...