EUVD-2025-22353

Malicious code in bioql PyPI...

EUVD-2025-32240

Malicious code in bioql PyPI...

EUVD-2024-48899

Malicious code in bioql PyPI...

EUVD-2025-4182

Malicious code in bioql PyPI...

EUVD-2022-44873

Malicious code in bioql PyPI...

EUVD-2023-50473

Malicious code in bioql PyPI...

EUVD-2023-30745

Malicious code in bioql PyPI...

EUVD-2025-0111

Malicious code in bioql PyPI...

EUVD-2024-45930

Malicious code in bioql PyPI...

EUVD-2022-1667

Malicious code in bioql PyPI...

EUVD-2024-49117

Malicious code in bioql PyPI...

EUVD-2022-7557

Malicious code in bioql PyPI...

EUVD-2023-41385

Malicious code in bioql PyPI...

CVE-2025-27236

A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field values the user does not have access to...

CVE-2025-27236

A regular Zabbix user can search other users in their user group via Zabbix API by select fields the user does not have access to view. This allows data-mining some field values the user does not have access to...

BIT-NIFI-2022-33140 Improper Neutralization of Command Elements in Shell User Group Provider

The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the...

BIT-NIFI-2020-13940

In Apache NiFi 1.0.0 to 1.11.4, the notification service manager and various policy authorizer and user group provider objects allowed trusted administrators to inadvertently configure a potentially malicious XML file. The XML file has the ability to make external calls to services via XXE...

Linux Distros Unpatched Vulnerability : CVE-2019-16685

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr 9.0.5 has stored XSS vulnerability via a User Group Description section to card.php. A user with the Create/modify other users, groups and permissions...

PT-2025-30450 · Unknown · Onyx Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Onyx Enterprise Edition version 0.27.0 Description: An authorization bypass exists in the update user group function within onyx-dot-app Onyx Enterprise Edition. This allows remote authenticated attackers to modify arbitrary user groups by...

CVE-2025-51479

Authorization bypass in updateusergroup in onyx-dot-app Onyx Enterprise Edition 0.27.0 allows remote authenticated attackers to modify arbitrary user groups via crafted PATCH requests to the /api/manage/admin/user-group/id endpoint, bypassing intended curator-group assignment checks...