EUVD-2023-0555

Malicious code in bioql PyPI...

EUVD-2024-52581

Malicious code in bioql PyPI...

EUVD-2023-58011

Malicious code in bioql PyPI...

EUVD-2022-5963

Malicious code in bioql PyPI...

EUVD-2025-8938

Malicious code in bioql PyPI...

EUVD-2022-30238

Malicious code in bioql PyPI...

EUVD-2023-27622

Malicious code in bioql PyPI...

EUVD-2022-27795

Malicious code in bioql PyPI...

EUVD-2024-51606

Malicious code in bioql PyPI...

EUVD-2025-16426

Malicious code in bioql PyPI...

EUVD-2025-14626

Malicious code in bioql PyPI...

EUVD-2025-6514

Malicious code in bioql PyPI...

EUVD-2023-36630

Malicious code in bioql PyPI...

Liferay Portal和Liferay DXP 安全漏洞

Liferay Portal and Liferay DXP are both products of Liferay, Inc.Liferay Portal is a J2EE based portal solution. The solution uses technologies such as EJB as well as JMS and can be used as a Web publishing and sharing workspace, enterprise collaboration platform, social network, etc. Liferay DXP...

CVE-2025-56161

YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...

CVE-2025-56161

YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...

PT-2025-40399

Name of the Vulnerable Software and Affected Versions YOSHOP 2.0 Description The software allows unauthorized disclosure of information through comment-list API endpoints within the Goods module. The Comment model loads the related User model without filtering specific fields. Due to the absence ...

CVE-2025-56161

YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...

CVE-2025-56161

YOSHOP 2.0 allows unauthenticated information disclosure via comment-list API endpoints in the Goods module. The Comment model eagerly loads the related User model without field filtering; because User.php defines no $hidden or $visible attributes, sensitive fields bcrypt password hash, mobile...

ViDay 跨站脚本漏洞

ViDay is a business management platform from the Spanish company ViDay. ViDay suffers from a cross-site scripting vulnerability that originates from a JWT containing sensitive user information in an HTTP request, which could lead to information disclosure...