7880 matches found
PT-2025-40985
Name of the Vulnerable Software and Affected Versions Biobanking and Biomolecular Resources Negotiator version 3.15.2 Description A stored Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. A remote user can exploit this by sending a POST request with a...
CVE-2025-40646
Stored Cross-Site Scripting XSS vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/createjobsubmit.php”, using the “JobCreatedBy” parameter. This vulnerability could allow a remote...
EUVD-2025-24803
Flowise vulnerable to RCE via Dynamic function constructor injection...
CVE-2025-58580
An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example...
EUVD-2025-32499
An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example...
CVE-2025-58578 Unlimited user creation by authorized users
A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation...
EUVD-2025-32501
A user with the appropriate authorization can create any number of user accounts via an API endpoint using a POST request. There are no quotas, checking mechanisms or restrictions to limit the creation...
CVE-2025-11272
A vulnerability has been found in SeriaWei ZKEACMS up to 4.3. This affects the function Delete of the file src/ZKEACMS.Redirection/Controllers/UrlRedirectionController.cs of the component POST Request Handler. The manipulation leads to improper authorization. Remote exploitation of the attack is...
ZKEACMS 授权问题漏洞
ZKEACMS is a visually designed, WYSIWYG content management system from ZKEASOFT open source. An authorization issue vulnerability exists in ZKEACMS 4.3 and earlier versions, which stems from improper authorization of the Delete function in the file...
RockyLinux 9 : mod_auth_openidc (RLSA-2025:9396)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9396 advisory. modauthopenidc: DoS via Empty POST in modauthopenidc with OIDCPreservePost Enabled CVE-2025-3891 Tenable has extracted the preceding description block directly fr...
EUVD-2022-51631
Malicious code in bioql PyPI...
EUVD-2025-32104
Malicious code in bioql PyPI...
EUVD-2024-53704
Malicious code in bioql PyPI...
EUVD-2024-53596
Malicious code in bioql PyPI...
EUVD-2022-47953
Malicious code in bioql PyPI...
EUVD-2022-3777
Malicious code in bioql PyPI...
EUVD-2023-42637
Malicious code in bioql PyPI...
EUVD-2025-19523
Malicious code in bioql PyPI...