EUVD-2023-42888

Malicious code in bioql PyPI...

EUVD-2023-1300

Malicious code in bioql PyPI...

CVE-2023-39147

An arbitrary file upload vulnerability in Uvdesk 1.1.3 allows attackers to execute arbitrary code via uploading a crafted image file...

PT-2023-16124 · Uvdesk · Uvdesk

Name of the Vulnerable Software and Affected Versions: Uvdesk version 1.1.1 Description: The issue allows an authenticated remote attacker to execute commands on the server due to improper validation of profile pictures uploaded by customers. Recommendations: For Uvdesk version 1.1.1, consider...

CVE-2023-0325

Uvdesk version 1.1.1 allows an unauthenticated remote attacker to exploit a stored XSS in the application. This is possible because the application does not correctly validate the message sent by the clients in the ticket...