4663 matches found
EUVD-2012-4676
Malware in sbrugna...
EUVD-2013-4019
Malware in sbrugna...
EUVD-2010-3676
Malware in sbrugna...
EUVD-2020-18665
Malware in sbrugna...
CVE-2025-9875
The Event Tickets, RSVPs, Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ticketspot' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...
CVE-2025-10696 OpenSupports 4.11.0 — Insecure Direct Object Reference in supervised list
OpenSupports exposes an endpoint that allows the list of 'supervised users' for any account to be edited, but it does not validate whether the actor is the owner of that list. A Level 1 staff member can modify the supervision relationship of a third party the target user, who can then view the...
CVE-2025-10692 OpenSupports 4.11.0 — SQL Injection
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...
CVE-2025-10692 OpenSupports 4.11.0 — SQL Injection
The endpoint POST /api/staff/get-new-tickets concatenates the user-controlled parameter departmentId directly into the SQL WHERE clause without parameter binding. As a result, an authenticated staff user level ≥ 1 can inject SQL to alter the filter logic, effectively bypassing department scoping...
EUVD-2022-52629
Malicious code in bioql PyPI...
EUVD-2022-51291
Malicious code in bioql PyPI...
EUVD-2021-8666
Malicious code in bioql PyPI...
EUVD-2024-21247
Malicious code in bioql PyPI...
EUVD-2022-5115
Malicious code in bioql PyPI...
EUVD-2024-44150
Malicious code in bioql PyPI...
EUVD-2021-31687
Malicious code in bioql PyPI...
EUVD-2025-6225
Malicious code in bioql PyPI...
EUVD-2025-7514
Malicious code in bioql PyPI...
EUVD-2024-49843
Malicious code in bioql PyPI...