9 matches found
EUVD-2025-17560
Malicious code in bioql PyPI...
EUVD-2024-54658
Malicious code in bioql PyPI...
CVE-2025-45002
Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...
CVE-2025-45002
Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...
CVE-2024-46452
A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL...
CVE-2025-45002
Vigybag v1.0 and before is vulnerable to Cross Site Scripting XSS via the upload profile picture function under my profile...
CVE-2025-45002
The e-commerce platform Vigybag (versions 1.0 and before ) is vulnerable to Cross-Site Scripting (XSS) . The flaw exists in the upload profile picture function located under the "my profile" section, where improper neutralization of input during web page generation allows for the execution of mal...
CVE-2024-46452
A Host Header injection vulnerability in the password reset function of VigyBag Open Source Online Shop commit 3f0e21b allows attackers to redirect victim users to a malicious site via a crafted URL...