EUVD-2024-52684

Malicious code in bioql PyPI...

EUVD-2023-54731

Malicious code in bioql PyPI...

EUVD-2022-27263

Malicious code in bioql PyPI...

EUVD-2022-27264

Malicious code in bioql PyPI...

CVE-2024-46278

Teedy 1.11 is vulnerable to Cross Site Scripting XSS via the management console...

CVE-2024-54851

Teedy = 1.12 is vulnerable to Cross Site Request Forgery CSRF, due to the lack of CSRF protection...

Teedy 1.11 - Account Takeover via Stored Cross-Site Scripting (XSS)

Exploit Title: Teedy 1.11 - Account Takeover via Stored Cross-Site Scripting XSS Exploit Author: Ayato Shitomi @ Fore-Z co.ltd Demo Video: https://www.youtube.com/watch?v=udQgVogsmhA Vendor Homepage: https://teedy.io/ Software Link: https://github.com/Tomblib0/Teedy Version: 1.11 Tested on: Linux...

CVE-2025-22963

Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin...

CVE-2024-54851

Teedy = 1.12 is vulnerable to Cross Site Request Forgery CSRF, due to the lack of CSRF protection...

CVE-2024-54851

Teedy = 1.12 is vulnerable to Cross Site Request Forgery CSRF, due to the lack of CSRF protection...

CVE-2024-54852

Teedy versions 1.9 through 1.12 are vulnerable to LDAP injection when the LDAP connection is activated. The root cause is the improper sanitization of user input within the username field of the login form. An unauthenticated attacker can exploit this to perform malicious actions, including creat...

PT-2025-3080 · Teedy · Teedy

Name of the Vulnerable Software and Affected Versions: Teedy versions 1.12 and earlier Description: The issue is related to Cross Site Request Forgery CSRF, which occurs due to the lack of CSRF protection. Recommendations: For Teedy versions 1.12 and earlier, as a temporary workaround, consider...

CVE-2024-54851

Teedy versions 1.12 and earlier are vulnerable to Cross-Site Request Forgery (CSRF) due to a lack of proper CSRF protection mechanisms. This flaw could allow an attacker to perform unauthorized actions on behalf of a user. As of the current reports, there is no information regarding a newer versi...

CVE-2025-22963

Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin...

CVE-2025-22963

Teedy through 1.11 allows CSRF for account takeover via POST /api/user/admin...

CVE-2024-46278

Teedy 1.11 is vulnerable to Cross Site Scripting XSS via the management console...