CVE-2023-43838

CVE-2023-43838 Una vulnerabilità di upload arbitrario di file in Personal Management System v1.4.64 consente agli attaccanti di eseguire codice arbitrario caricando un file SVG appositamente realizzato come avatar del profilo utente. Informazioni aggiuntive 1. Creare alert.svg con il seguente...

CVE-2025-28355

CVE-2025-28355 È stato identificato che l'applicazione https://github.com/Volmarg/personal-management-system è vulnerabile ad attacchi CSRF. Una delle molte azioni che un attaccante può eseguire è ingannare un utente legittimo per fargli eseguire una richiesta cross-site che modificherà la sua...

CVE-2023-43838

An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar...

EUVD-2025-12206

Malicious code in bioql PyPI...

EUVD-2025-11801

Malicious code in bioql PyPI...

EUVD-2025-12364

Malicious code in bioql PyPI...

EUVD-2025-12366

Malicious code in bioql PyPI...

EUVD-2023-48201

Malicious code in bioql PyPI...

EUVD-2024-26329

Malicious code in bioql PyPI...

EUVD-2025-12265

Malicious code in bioql PyPI...

EUVD-2025-11798

Malicious code in bioql PyPI...

CVE-2024-29318

Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting XSS via upload of a SVG file with embedded javascript code...

CVE-2024-29319

Volmarg Personal Management System 1.4.64 is vulnerable to SSRF Server Side Request Forgery via uploading a SVG file. The server can make unintended HTTP and DNS requests to a server that the attacker controls...

CVE-2025-29456

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the create Notes function...

CVE-2025-29454

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Upload function...

CVE-2025-29455

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Travel Ideas" function...

CVE-2025-29453

An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the my-contacts-settings component...

CVE-2025-28355

Volmarg Personal Management System 1.4.65 is vulnerable to Cross Site Request Forgery CSRF allowing attackers to execute arbitrary code and obtain sensitive information via the SameSite cookie attribute defaults value set to none...

CVE-2024-53568

A stored cross-site scripting XSS vulnerability in the Image Upload section of Volmarg Personal Management System v1.4.65 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the tag parameter...

CVE-2024-53569

A stored cross-site scripting XSS vulnerability in the New Goal Creation section of Volmarg Personal Management System v1.4.65 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the description parameter...