EUVD-2025-9612

Malicious code in bioql PyPI...

CVE-2025-22931

An insecure direct object reference IDOR in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attackers to access files uploaded by staff members...

CVE-2025-22931

An insecure direct object reference IDOR in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attackers to access files uploaded by staff members...

CVE-2025-22931

An insecure direct object reference IDOR in the component /assets/stafffiles of OS4ED openSIS v7.0 to v9.1 allows unauthenticated attackers to access files uploaded by staff members...

PT-2025-14640 · Os4Ed · Os4Ed Opensis

Name of the Vulnerable Software and Affected Versions: OS4ED openSIS versions 7.0 through 9.1 Description: The issue concerns an insecure direct object reference IDOR in the /assets/stafffiles component. This allows unauthenticated attackers to access files that have been uploaded by staff member...

CVE-2025-22931

OS4ED openSIS versions v7.0 through v9.1 are vulnerable to an Insecure Direct Object Reference (IDOR) in the /assets/stafffiles component. This flaw allows unauthenticated attackers to access files uploaded by staff members. As a mitigation, it is recommended to restrict access to the /assets/sta...