EUVD-2022-7007

Malicious code in bioql PyPI...

EUVD-2025-23891

Malicious code in bioql PyPI...

EUVD-2025-6279

Malicious code in bioql PyPI...

EUVD-2024-36369

Malicious code in bioql PyPI...

EUVD-2022-28782

Malicious code in bioql PyPI...

EUVD-2024-43136

Malicious code in bioql PyPI...

EUVD-2024-29728

Malicious code in bioql PyPI...

EUVD-2023-45317

Malicious code in bioql PyPI...

EUVD-2025-21758

Malicious code in bioql PyPI...

EUVD-2022-43589

Malicious code in bioql PyPI...

EUVD-2023-40120

Malicious code in bioql PyPI...

EUVD-2023-45319

Malicious code in bioql PyPI...

EUVD-2023-55111

Malicious code in bioql PyPI...

EUVD-2023-53985

Malicious code in bioql PyPI...

User Enumeration

prestashop/prestashop is vulnerable to User Enumeration. The vulnerability is due to insufficient validation of the idemployee and resettoken parameters due to the back-office accepting manipulated values without proper authentication or checks; an unauthenticated attacker can craft requests to t...

User Enumeration

mautic/core is vulnerable to user enumeration. The vulnerability is due to differing response times between valid and invalid usernames, which allows an attacker to enumerate valid accounts and subsequently attempt brute-force attacks...

Joomla! 4.x < 4.4.14 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.x prior to 4.4.14 or 5.x prior to 5.3.4. It is, therefore, affected by multiple vulnerabilities. - Inadequate content filtering within the checkAttribute methods leads to XSS vulnerabilities in...

Joomla! 5.x < 5.3.4 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.x prior to 4.4.14 or 5.x prior to 5.3.4. It is, therefore, affected by multiple vulnerabilities. - Inadequate content filtering within the checkAttribute methods leads to XSS vulnerabilities in...

CVE-2025-54477

Improper handling of authentication requests lead to a user enumeration vector in the passkey authentication method...

CVE-2025-56132

LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns distinguishable responses for valid and invalid email addresses, allowing unauthenticated attackers to determine the existence of user accounts. Version 4.2...