7565 matches found
EUVD-2025-17629
Malicious code in bioql PyPI...
EUVD-2025-31610
Malicious code in bioql PyPI...
EUVD-2022-29988
Malicious code in bioql PyPI...
EUVD-2023-53913
Malicious code in bioql PyPI...
EUVD-2022-52059
Malicious code in bioql PyPI...
EUVD-2024-44828
Malicious code in bioql PyPI...
EUVD-2025-31581
Malicious code in bioql PyPI...
EUVD-2023-29717
Malicious code in bioql PyPI...
EUVD-2025-32359
HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields...
Server-Side Request Forgery (SSRF)
mautic/core is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to missing validation of webhook destinations, which allows an attacker with webhook permissions to send crafted requests and potentially access internal services, bypassing firewalls...
MetInfo CMS 安全漏洞
MetInfo CMS is a content management system from China's Mito MetInfo. A security vulnerability exists in MetInfo CMS version 8.0, which stems from an unvalidated SVG file input in the Image Management module and could lead to a stored cross-site scripting attack...
PT-2025-40823
CVE-2025-61585 - Apache Felix Unvalidated User Input CVE ID : CVE-2025-61585 Published : Oct. 3, 2025, 9:15 p.m. | 2 hours, 13 minutes ago Description : Rejected reason: Further research determined the issue is not an independent vulnerability as it originates from Apache Felix. Severity: 0.0 | N...
MetInfo CMS 安全漏洞
MetInfo CMS is a content management system CMS from China's Mito MetInfo. A security vulnerability exists in MetInfo CMS version 8.0, which stems from an unvalidated SVG file input in the download management module, which could lead to a stored cross-site scripting attack...
PT-2025-40574
Name of the Vulnerable Software and Affected Versions HCL MyXalytics version 6.6 Description The software is susceptible to a Mass Assignment issue. This happens when user-supplied data is automatically mapped to application objects without sufficient validation or access controls, potentially...
ERPNEXT 安全漏洞
ERPNext is an open source enterprise resource planning solution from ERPNext India. ERPNext suffers from a SQL injection vulnerability that stems from the lack of validation of the orderby and groupby parameters against externally entered SQL statements. An attacker can exploit this vulnerability...
PHP Education Management 跨站脚本漏洞
PHP Education Management is an education manager by the individual developer Iqbolshoh Ilhomjonov. A cross-site scripting vulnerability exists in PHP Education Management version 1.0, which stems from unvalidated input in the title field in topics.php and could lead to a stored cross-site scripti...
PT-2025-40653
CVE-2025-61852 - Cisco WebEx Meeting Center Unvalidated Redirect CVE ID : CVE-2025-61852 Published : Oct. 2, 2025, 3:15 a.m. | 1 hour, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...
TP-Link AX1800 安全漏洞
TP-Link AX1800 is a WiFi router from China P&L TP-Link. A security vulnerability exists in the TP-Link AX1800 that stems from an unvalidated dbdir field that could lead to the execution of arbitrary code...
PT-2025-40655
CVE-2025-61854 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-61854 Published : Oct. 2, 2025, 3:15 a.m. | 1 hour, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...
GHSA-9MH6-G99M-PPCW auth0-PHP SDK Does Not Properly Handle File Types in Bulk User Import
Overview In applications built with the Auth0-PHP SDK, the Bulk User Import endpoint does not validate the file path wrapper or value. Without proper validation, affected applications may accept arbitrary file paths or URLs. Am I affected? You are affected by this vulnerability if you meet the...