EUVD-2021-8275

Malicious code in bioql PyPI...

EUVD-2024-42745

Malicious code in bioql PyPI...

EUVD-2022-33568

Malicious code in bioql PyPI...

EUVD-2021-32512

Malicious code in bioql PyPI...

EUVD-2024-52639

Malicious code in bioql PyPI...

EUVD-2025-8961

Malicious code in bioql PyPI...

EUVD-2022-25223

Malicious code in bioql PyPI...

EUVD-2025-8959

Malicious code in bioql PyPI...

EUVD-2023-44992

Malicious code in bioql PyPI...

EUVD-2022-5591

Malicious code in bioql PyPI...

EUVD-2021-28848

Malicious code in bioql PyPI...

EUVD-2023-12122

Malicious code in bioql PyPI...

EUVD-2022-52215

Malicious code in bioql PyPI...

Liferay Portal and Liferay DXP security vulnerabilities

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

CVE-2025-56161

YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...

CVE-2025-56161

YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...

PT-2025-40399

Name of the Vulnerable Software and Affected Versions YOSHOP 2.0 Description The software allows unauthorized disclosure of information through comment-list API endpoints within the Goods module. The Comment model loads the related User model without filtering specific fields. Due to the absence ...

ViDay Cross-site Scripting Vulnerabilities

ViDay is a business management platform from the Spanish company ViDay. ViDay suffers from a cross-site scripting vulnerability that originates from a JWT containing sensitive user information in an HTTP request, which could lead to information disclosure...

CVE-2025-56161

YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...

CVE-2025-56161

YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...