TCMAN GIM 信息泄露漏洞

TCMAN GIM is a management system from the Spanish company TCMAN. An information disclosure vulnerability exists in TCMAN GIM version v11 20250304, which originates from an unauthenticated attacker being able to determine if a user exists via the pda:username parameter...

PT-2025-48683

User Enumeration Vulnerability in TCMAN GIM v11 version 20250304. This vulnerability allows an unauthenticated attacker to determine whether a user exists on the system. The vulnerability is exploitable through the 'pda:username' parameter with 'soapaction GetLastDatePasswordChange' in...

EUVD-2025-17457

Malicious code in bioql PyPI...

EUVD-2022-38994

Malicious code in bioql PyPI...

EUVD-2025-13575

Malicious code in bioql PyPI...

EUVD-2021-28007

Malicious code in bioql PyPI...

EUVD-2025-13579

Malicious code in bioql PyPI...

EUVD-2025-13580

Malicious code in bioql PyPI...

EUVD-2025-13576

Malicious code in bioql PyPI...

EUVD-2021-33943

Malicious code in bioql PyPI...

EUVD-2025-17458

Malicious code in bioql PyPI...

EUVD-2025-13582

Malicious code in bioql PyPI...

EUVD-2021-28006

Malicious code in bioql PyPI...

EUVD-2022-38993

Malicious code in bioql PyPI...

EUVD-2025-17456

Malicious code in bioql PyPI...

EUVD-2025-13573

Malicious code in bioql PyPI...

CVE-2025-40668

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an attacker, with low privilege level, to change the password of other users through a POST request using the parameters idUser, PasswordActual, PasswordNew and PasswordNewRepeat in...

CVE-2025-40669

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to modify the permissions held by each of the application's users, including the user himself by sending a POST request to /PC/Options.aspx?Command=2&Page=-1...

CVE-2025-40670

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an unprivileged attacker to create a user and assign it many privileges by sending a POST request to /PC/frmGestionUser.aspx/updateUser...

CVE-2025-40668

Incorrect authorization vulnerability in TCMAN's GIM v11. This vulnerability allows an attacker, with low privilege level, to change the password of other users through a POST request using the parameters idUser, PasswordActual, PasswordNew and PasswordNewRepeat in...