4660 matches found
EUVD-2010-5068
Malware in sbrugna...
CVE-2025-9875
The Event Tickets, RSVPs, Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ticketspot' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...
CVE-2025-10696 OpenSupports 4.11.0 — Insecure Direct Object Reference in supervised list
OpenSupports exposes an endpoint that allows the list of 'supervised users' for any account to be edited, but it does not validate whether the actor is the owner of that list. A Level 1 staff member can modify the supervision relationship of a third party the target user, who can then view the...
CVE-2025-10692 OpenSupports 4.11.0 — SQL Injection
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...
CVE-2025-10692 OpenSupports 4.11.0 — SQL Injection
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...
EUVD-2022-52629
Malicious code in bioql PyPI...
EUVD-2022-51291
Malicious code in bioql PyPI...
EUVD-2022-51292
Malicious code in bioql PyPI...
EUVD-2022-51290
Malicious code in bioql PyPI...
EUVD-2021-8666
Malicious code in bioql PyPI...
EUVD-2024-21247
Malicious code in bioql PyPI...
EUVD-2024-48522
Malicious code in bioql PyPI...
EUVD-2024-48368
Malicious code in bioql PyPI...
EUVD-2025-31100
Malicious code in bioql PyPI...
EUVD-2025-16267
Malicious code in bioql PyPI...
EUVD-2022-5115
Malicious code in bioql PyPI...
EUVD-2024-44150
Malicious code in bioql PyPI...
EUVD-2021-31687
Malicious code in bioql PyPI...