CVE-2026-54307: Incorrect Authorization

n8n is an open source workflow automation platform. Prior to 1.123.55, 2.25.7, and 2.26.2, a member-level user with editor access to a shared workflow could reference credentials they do not own via specific public API endpoints. Credential ownership checks were only enforced partially leading to...

EUVD-2021-29304

Malicious code in bioql PyPI...

EUVD-2023-59633

Malicious code in bioql PyPI...

CVE-2023-2904

The External Visitor Manager portal of HID’s SAFE versions 5.8.0 through 5.11.3 are vulnerable to manipulation within web fields in the application programmable interface API. An attacker could log in using account credentials available through a request generated by an internal user and then...

PT-2022-6298 · Apeks-Vuz · Apeks-Vuz

Name of the Vulnerable Software and Affected Versions: Apeks-VUZ system affected versions not specified Description: The issue is related to the storage of passwords in plain text in the system settings table of the Apeks database in the Apeks-VUZ education automation system. This could allow a...

SquirrelMail 1.2.x - From Email Header HTML Injection

SquirrelMail 1.2.x - From Email Header HTML Injection source: https://www.securityfocus.com/bid/10450/info SquirrelMail is reported to be prone to a 'from' field email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email...