EUVD-2025-17560

Malicious code in bioql PyPI...

EUVD-2024-54658

Malicious code in bioql PyPI...

CVE-2024-46452

A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL...

CVE-2025-45002

Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...

CVE-2025-45002

Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...

CVE-2025-45002

Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...

CVE-2024-46452

A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL...

CVE-2024-46452

A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL...

CVE-2025-45002

Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...

VigyBag Open Source Online Shop 安全漏洞

VigyBag Open Source Online Shop is an open source e-commerce platform from VigyBag India. A security vulnerability exists in VigyBag Open Source Online Shop that stems from a Host Header injection in the password reset function, which could result in a redirection to a malicious site...

CVE-2024-46452

The CVE-2024-46452 entry concerns VigyBag Open Source Online Shop. A Host Header injection vulnerability exists in the password reset function, tied to commit 3f0e21b, enabling attackers to cause victims to be redirected to a malicious site via a crafted URL. The available sources describe the vu...

CVE-2025-45002

CVE-2025-45002 affects Vigybag v1.0 and earlier, with an XSS vulnerability in the My Profile Upload Profile Picture feature. The issue concerns cross-site scripting via the profile image upload function. The provided details identify the affected software and the vulnerability class but do not sp...

CVE-2025-45002

Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...

CVE-2024-46452

A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL...

PT-2025-24540 · Unknown · Vigybag Open Source Online Shop

Name of the Vulnerable Software and Affected Versions: VigyBag Open Source Online Shop affected versions not specified Description: A Host Header injection issue in the password reset function allows attackers to redirect victim users to a malicious site via a crafted URL. Recommendations: At the...

Vigybag 安全漏洞

Vigybag is an e-commerce platform by Vigybag India. A security vulnerability exists in Vigybag v1.0 and earlier versions, which stems from the Upload Profile Image feature in My Profile being vulnerable to cross-site scripting attacks...

PT-2025-24543 · Vigybag · Vigybag

Name of the Vulnerable Software and Affected Versions: Vigybag versions 1.0 and before Description: The issue is related to Cross Site Scripting XSS via the upload profile picture function under the user's profile. This allows for potential malicious script execution. No information is provided...