CVE-2026-24443

EventSentry versions prior to 6.0.1.20 contain an unverified password change vulnerability in the account management functionality of the Web Reports interface. The password change mechanism does not require validation of the current password before allowing a new password to be set. An attacker...

CVE-2026-24443 EventSentry < 6.0.1.20 Web Reports Unverified Password Change

EventSentry versions prior to 6.0.1.20 contain an unverified password change vulnerability in the account management functionality of the Web Reports interface. The password change mechanism does not require validation of the current password before allowing a new password to be set. An attacker...

EUVD-2021-29059

Malicious code in bioql PyPI...

FacturaScripts 跨站脚本漏洞

FacturaScripts is an open source ERP software by Carlos Garcia, an individual developer in Spain. A security vulnerability exists in FacturaScripts that originates from storing XSS in zip format in the GitHub repository neorazorx/facturascripts via the upload plugin feature. An attacker could...