3261 matches found
EUVD-2019-2967
Malware in sbrugna...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987085)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987085 advisory. In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix PCI device refcount leak in dmardevscopeinit foreachpcidev is implemented by...
CVE-2025-10692 OpenSupports 4.11.0 — SQL Injection
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...
CVE-2025-10692
CVE-2025-10692 describes an SQL injection in OpenSupports 4.11.0 via POST /api/staff/get-new-tickets, where the user-supplied departmentId is concatenated into the SQL WHERE clause without parameter binding. An authenticated staff user (level ≥ 1) can alter filtering to access tickets outside the...
CVE-2025-10692 OpenSupports 4.11.0 — SQL Injection
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...
EUVD-2025-25176
Malicious code in bioql PyPI...
EUVD-2025-19557
Malicious code in bioql PyPI...
EUVD-2025-13083
Malicious code in bioql PyPI...
EUVD-2025-24452
Malicious code in bioql PyPI...
EUVD-2021-6958
Malicious code in bioql PyPI...
EUVD-2022-7028
Malicious code in bioql PyPI...
EUVD-2023-41457
Malicious code in bioql PyPI...
EUVD-2022-3327
Malicious code in bioql PyPI...
EUVD-2023-30781
Malicious code in bioql PyPI...
EUVD-2024-35272
Malicious code in bioql PyPI...
EUVD-2025-27510
Malicious code in bioql PyPI...
EUVD-2023-55486
Malicious code in bioql PyPI...
EUVD-2025-24448
Malicious code in bioql PyPI...