EUVD-2021-28612

Malicious code in bioql PyPI...

EUVD-2023-58508

Malicious code in bioql PyPI...

EUVD-2022-45966

Malicious code in bioql PyPI...

EUVD-2023-0018

Malicious code in bioql PyPI...

EUVD-2025-10693

Malicious code in bioql PyPI...

EUVD-2025-9316

Malicious code in bioql PyPI...

EUVD-2023-31252

Malicious code in bioql PyPI...

EUVD-2025-4183

Malicious code in bioql PyPI...

EUVD-2024-20801

Malicious code in bioql PyPI...

EUVD-2024-33578

Malicious code in bioql PyPI...

EUVD-2022-32623

Malicious code in bioql PyPI...

EUVD-2021-6702

Malicious code in bioql PyPI...

EUVD-2024-22329

Malicious code in bioql PyPI...

EUVD-2021-8745

Malicious code in bioql PyPI...

RuoYi License Issue Vulnerability

RuoYi is a backend management system for individual developers in China RuoYi RuoYi. RuoYi 4.8.1 and previous versions of the authorization problem vulnerability, the vulnerability stems from the file / system / role / authUser / cancelAll in the parameter roleId and userIds there is improper...

CUSEC-2020

Based on the provided code and context, here is a summary of the analysis: Classification: This is an Insecure Direct Object Reference IDOR bug. Background: The bug occurs when the application does not verify that the current user is authorized to access a resource with a specific ID. In this cas...

MAL-2025-37965 Malicious code in user-authorization (npm)

The package user-authorization was found to contain malicious code...

Malicious code in user-authorization (npm)

The package user-authorization was found to contain malicious code...

PT-2025-31860 · Unknown +1 · Sogo Web Mail +1

Name of the Vulnerable Software and Affected Versions: SOGo Webmail versions through 5.6.0 Description: An Insecure Direct Object Reference IDOR vulnerability allows an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending...

BIT-GITLAB-2025-6948 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 17.11 before 17.11.6, 18.0 before 18.0.4, and 18.1 before 18.1.2 that, under certain conditions, could have allowed a successful attacker to execute actions on behalf of users by injecting malicious content...