EUVD-2025-9612

Malicious code in bioql PyPI...

CVE-2025-22931

An insecure direct object reference IDOR in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attackers to access files uploaded by staff members...

CVE-2025-22931

An insecure direct object reference IDOR in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attackers to access files uploaded by staff members...

CVE-2025-22931

OS4ED openSIS versions v7.0 through v9.1 are vulnerable to an Insecure Direct Object Reference (IDOR) flaw in the /assets/stafffiles component. This vulnerability allows unauthenticated attackers to access files uploaded by staff members. To mitigate this risk until a patch is available, it is re...

CVE-2025-22931

An insecure direct object reference IDOR in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attackers to access files uploaded by staff members...

PT-2025-14640 · Os4Ed · Os4Ed Opensis

Name of the Vulnerable Software and Affected Versions: OS4ED openSIS versions 7.0 through 9.1 Description: The issue concerns an insecure direct object reference IDOR in the /assets/stafffiles component. This allows unauthenticated attackers to access files that have been uploaded by staff member...