EUVD-2025-13255

Malicious code in bioql PyPI...

CVE-2024-48906

Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name...

CVE-2024-48905

Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint...

CVE-2024-48907

Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API...

CVE-2024-48907

Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API...

CVE-2024-48907

Sematell ReplyOne 7.4.3.0 allows SSRF via the application server API...

CVE-2024-48905

Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint...

CVE-2024-48905

Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint...

CVE-2024-48906

Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name...

CVE-2024-48905

Sematell ReplyOne version 7.4.3.0 is affected by a vulnerability involving Insecure Permissions on the /rest/sessions endpoint. This improper access control could potentially allow unauthorized access or actions, specifically leading to unsafe direct object references . To mitigate this risk, it ...

CVE-2024-48906

Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name...

CVE-2024-48906

Sematell ReplyOne 7.4.3.0 allows XSS via a ReplyDesk e-mail attachment name...

CVE-2024-48906

Sematell ReplyOne version 7.4.3.0 is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. The vulnerability is triggered via a ReplyDesk e-mail attachment name , where an attacker can inject malicious scripts into the system. These scripts c...

CVE-2024-48905

Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint...

CVE-2024-48905: Improper Access Control

Sematell ReplyOne 7.4.3.0 has Insecure Permissions for the /rest/sessions endpoint...

PT-2025-18713 · Sematell · Sematell Replyone

Name of the Vulnerable Software and Affected Versions: Sematell ReplyOne version 7.4.3.0 Description: The issue allows for cross-site scripting XSS attacks through a ReplyDesk e-mail attachment name. This means an attacker could potentially inject malicious scripts into the system by manipulating...

CVE-2024-48907

Sematell ReplyOne version 7.4.3.0 is vulnerable to Server-Side Request Forgery (SSRF) via the application server API. This vulnerability allows an attacker to manipulate the server into making unauthorized requests. To mitigate the risk, it is recommended to restrict access to the application ser...

PT-2025-18714 · Sematell · Sematell Replyone

Name of the Vulnerable Software and Affected Versions: Sematell ReplyOne version 7.4.3.0 Description: The issue allows Server-Side Request Forgery SSRF through the application server API. This means an attacker could potentially manipulate the server into making unauthorized requests...

Sematell ReplyOne 安全漏洞

Sematell ReplyOne is an artificial intelligence-based reply management software from Sematell. A security vulnerability exists in Sematell ReplyOne version 7.4.3.0 that stems from the presence of a server-side request forgery that could result in sending unauthorized requests...

Sematell ReplyOne 安全漏洞

Sematell ReplyOne is an artificial intelligence-based reply management software from Sematell. A security vulnerability exists in Sematell ReplyOne version 7.4.3.0 that stems from the presence of cross-site scripting via ReplyDesk email attachment names...