CVE-2026-21694

Titra (open‑source time tracking) has an Improper Access Control in versions 0.99.49 and earlier, enabling users to view/edit other users’ time entries in private projects. The issue affects the Titra APIs and is fixed in version 0.99.50. No exploitation details are provided in the sources; advis...

CVE-2026-21694 Titra APIs have Improper Access Control

Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and edit other users' time entries in private projects they have not been granted access to. This issue is fixed in version 0.99.50...

CVE-2026-21694 Titra APIs have Improper Access Control

Titra is open source project time tracking software. Versions 0.99.49 and below have Improper Access Control, allowing users to view and edit other users' time entries in private projects they have not been granted access to. This issue is fixed in version 0.99.50...

Bugsink 安全漏洞

Bugsink is a self-hosted bug tracking software from Bugsink Open Source. A security vulnerability exists in Bugsink versions prior to 2.0.6, which stems from a specially crafted Brotli compressed envelope that may lead to excessive CPU time consumption, possibly resulting in a denial of service...

CVE-2025-60291

An issue was discovered in eTimeTrackLite Web thru 12.0 20250704. There is a permission control flaw that allows unauthorized attackers to access specific routes and modify database connection configurations...

EUVD-2006-0698

Malware in sbrugna...

EUVD-2006-0696

Malware in sbrugna...

EUVD-2006-0697

Malware in sbrugna...

SICK AG Baggage Analytics 安全漏洞

SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that stems from a different error message being returned on login failure, which could lead to a username enumeration...

EUVD-2024-54711

Malicious code in bioql PyPI...

EUVD-2023-33571

Malicious code in bioql PyPI...

EUVD-2023-32129

Malicious code in bioql PyPI...

CVE-2025-7487

creationtimestamp| type| source ---|---|--- 2025-07-12 19:49:06+00:00| seen| https://bsky.app/profile/potato.software/post/3lts4w2tptd2b...

CVE-2024-12364

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mavi Yeşil Software Guest Tracking Software allows SQL Injection. This issue affects Guest Tracking Software. NOTE: The vendor did not inform about the completion of the fixing process within the...

CVE-2024-12364 SQLi in Mavi Yeşil Software's Guest Tracking Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mavi Yeşil Software Guest Tracking Software allows SQL Injection. This issue affects Guest Tracking Software. NOTE: The vendor did not inform about the completion of the fixing process within the...

CVE-2024-12364

CVE-2024-12364 covers an SQL Injection in Mavi Yeşil Software’s Guest Tracking Software. The vulnerability arises from improper neutralization of special elements in SQL commands within the Guest Tracking Software’s components, enabling remote exploitation with network access and no privileges re...

CVE-2024-12364 SQLi in Mavi Yeşil Software's Guest Tracking Software

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mavi Yeşil Software Guest Tracking Software allows SQL Injection. This issue affects Guest Tracking Software. NOTE: The vendor did not inform about the completion of the fixing process within the...

PT-2025-27239

Name of the Vulnerable Software and Affected Versions: Mavi Yeşil Software Guest Tracking Software affected versions not specified Description: The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in SQL commands. This allows for SQL...

Mavi Yeşil Software Guest Tracking Software SQL注入漏洞

Mavi Yeşil Software Guest Tracking Software is a software for tracking visitor information from Mavi Yeşil Software, Turkey. Mavi Yeşil Software Guest Tracking Software suffers from a SQL injection vulnerability that stems from improper neutralization of special elements in SQL commands, which...

CVE-2025-46157

An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment function in the leave request form...