EUVD-2024-39177

Malicious code in bioql PyPI...

EUVD-2023-53985

Malicious code in bioql PyPI...

EUVD-2023-25406

Malicious code in bioql PyPI...

EUVD-2025-4746

Malicious code in bioql PyPI...

EUVD-2023-53084

Malicious code in bioql PyPI...

EUVD-2025-16206

Malicious code in bioql PyPI...

EUVD-2024-53460

Malicious code in bioql PyPI...

EUVD-2023-1120

Malicious code in bioql PyPI...

EUVD-2024-35254

Malicious code in bioql PyPI...

EUVD-2024-46487

Malicious code in bioql PyPI...

CVE-2025-27236 User information disclosure via api_jsonrpc.php on method user.get with param search

A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field values the user does not have access to...

CVE-2025-27236

CVE-2025-27236 describes an information-disclosure vulnerability in Zabbix API. A regular Zabbix user can use user.get (via api_jsonrpc.php) to search for other users within their user group and retrieve fields that the requester should not access, enabling data-mining of restricted field values....

SUSE CVE-2025-9076

Mattermost versions 10.10.x = 10.10.1 fail to properly sanitize user data during shared channel membership synchronization, which allows malicious or compromised remote clusters to access sensitive user information via unsanitized user objects. This vulnerability affects Mattermost Server instanc...

PT-2025-37988

Name of the Vulnerable Software and Affected Versions: code-projects Food Ordering Review System version 1.0 Description: The Food Ordering Review System is susceptible to a Cross Site Scripting XSS issue within the registration function. An attacker can inject malicious JavaScript code as a...

CVE-2025-56276

code-projects Food Ordering Review System 1.0 is vulnerable to Cross Site Scripting XSS in the registration function. An attacker enters malicious JavaScript code as a username, which triggers the XSS vulnerability when the admin views user information, resulting in the disclosure of the admin's...

PT-2025-37464

Name of the Vulnerable Software and Affected Versions Mattermost versions 10.10.x through 10.10.1 Description Mattermost Server instances with shared channels enabled are susceptible to an information disclosure issue. The software fails to properly sanitize user data during shared channel...

saleor 安全漏洞

saleor is a Saleor Commerce open source interface software. A security vulnerability exists in Saleor versions prior to 3.21.0 through 3.21.16, which stems from an error mishandling that could lead to the disclosure of user information...

BoomCMS 安全漏洞

BoomCMS is a content management platform from Boom Open Source. A security vulnerability exists in BoomCMS version v9.1.4, which stems from vulnerability to cross-framework scripting attacks and may lead to user information disclosure...

CVE-2025-41030 Multiple vulnerabilities in Deporsite by T-INNOVA

Lack of authorisation in Deporsite by T-INNOVA. This vulnerability allows an unauthenticated attacker to obtain information from other users via GET ‘/ajax/TInnovav2/IntegrantesRecursov21/llamadaAjax/buscarPersona’ using the ‘dni’ parameter...

PT-2025-35543

Name of the Vulnerable Software and Affected Versions: Deporsite by T-INNOVA affected versions not specified Description: The application lacks proper authorization, allowing an unauthenticated attacker to obtain information from other users. This is achieved by sending a GET request to the...