EUVD-2025-7477

Malicious code in bioql PyPI...

EUVD-2025-6103

Malicious code in bioql PyPI...

CVE-2025-29504

Insecure Permission vulnerability in student-manage 1 allows a local attacker to escalate privileges via the Unsafe permission verification...

CVE-2025-29504

Insecure Permission vulnerability in student-manage 1 allows a local attacker to escalate privileges via the Unsafe permission verification...

CVE-2025-29504: Incorrect Default Permissions

Insecure Permission vulnerability in student-manage 1 allows a local attacker to escalate privileges via the Unsafe permission verification...

CVE-2025-29504

Insecure Permission vulnerability in student-manage 1 allows a local attacker to escalate privileges via the Unsafe permission verification...

CVE-2025-29504

A local attacker can escalate privileges in student-manage version 1 due to an unsafe permission verification process. This insecure privilege validation allows for unauthorized access to higher-level permissions. As a temporary workaround, users should restrict access to sensitive areas of the s...

CVE-2025-2042

A vulnerability has been found in huang-yk student-manage 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-2042

A vulnerability has been found in huang-yk student-manage 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-2042 huang-yk student-manage cross-site request forgery

A vulnerability has been found in huang-yk student-manage 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-2042

CVE-2025-2042 affects huang-yk student-manage 1.0. The issue is described as a cross-site request forgery vulnerability arising from unknown code paths in the application. Exploitation is remotely possible and the exploit has been publicly disclosed. Multiple connected sources corroborate a CSRF ...

CVE-2025-2042 huang-yk student-manage cross-site request forgery

A vulnerability has been found in huang-yk student-manage 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2024-13902

A vulnerability, which was classified as problematic, was found in huang-yk student-manage 1.0. This affects an unknown part of the component Edit a Student Information Page. The manipulation of the argument Class leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2024-13902 huang-yk student-manage Edit a Student Information Page cross site scripting

A vulnerability, which was classified as problematic, was found in huang-yk student-manage 1.0. This affects an unknown part of the component Edit a Student Information Page. The manipulation of the argument Class leads to cross site scripting. It is possible to initiate the attack remotely. The...

PT-2025-9914

Name of the Vulnerable Software and Affected Versions huang-yk student-manage version 1.0 Description A problematic issue was found in the Edit a Student Information Page component, allowing for cross-site scripting through the manipulation of the Class argument. This can be initiated remotely...

PT-2025-10008

Name of the Vulnerable Software and Affected Versions huang-yk student-manage version 1.0 Description A vulnerability has been found in huang-yk student-manage and classified as problematic. This issue affects unknown code and leads to cross-site request forgery. The attack can be initiated...

student-manage security vulnerabilities

student-manage is a student grade management system developed by the Chinese individual developer Huang Yongkang. A security vulnerability exists in huang-yk student-manage version 1.0, which stems from a possible cross-site request forgery issue...

Student-Management Code Injection Vulnerability

student-manage is a student grade management system developed by a Chinese individual developer, Huang Yongkang. A code injection vulnerability exists in student-manage version 1.0, which stems from an incorrect operation of the parameter Class that can lead to cross-site scripting...

CVE-2025-2042: Cross-Site Request Forgery (CSRF)

A vulnerability has been found in huang-yk student-manage 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used...

CVE-2024-13902: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in huang-yk student-manage 1.0. This affects an unknown part of the component Edit a Student Information Page. The manipulation of the argument Class leads to cross site scripting. It is possible to initiate the attack remotely. The...