EUVD-2023-42622

Malicious code in bioql PyPI...

CVE-2023-38849

An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...

Cross site request forgery (csrf)

An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...

CVE-2023-38849

An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...

CVE-2023-38849: Exposure of Sensitive Information to an Unauthorized Actor

An issue in tire-sales Line v.13.6.1 allows a remote attacker to obtain sensitive information via crafted GET request...

CVE-2023-38849

The CVE-2023-38849 entry concerns tire-sales Line v.13.6.1, where a remote attacker can obtain sensitive information via a crafted GET request. The connected sources consistently reference this version and the information-disclosure impact, but do not provide concrete root-cause details, exploit ...

PT-2023-26629 · Unknown · Tire-Sales Line

Name of the Vulnerable Software and Affected Versions: tire-sales Line version 13.6.1 Description: An issue in the software allows a remote attacker to obtain sensitive information via a crafted GET request. Recommendations: For version 13.6.1, consider restricting access to sensitive information...