3556 matches found
CVE-2025-49594
Summary : CVE-2025-49594 affects XWiki OIDC. From version 2.17.1 up to, but not including, 2.18.2, any user with VIEW access to another user’s profile can forge a token for that user. If the instance allows token authentication, this enables authentication as any user whose profile is viewable. I...
PT-2025-40900
Name of the Vulnerable Software and Affected Versions XWiki versions 2.17.1 through 2.18.1 Description XWiki OpenID Connect OIDC contains tools for manipulating the OpenID Connect protocol. Individuals with VIEW access to a user profile can generate a token for that user in versions prior to...
XWiki Platform SQL注入漏洞
XWiki Platform is XWiki's open source suite of Wiki platforms for creating web collaboration applications. A SQL injection vulnerability exists in XWiki Platform versions 4.3-milestone-1 through 16.10.9, 17.4.2, and prior to 17.5.0, which stems from an HQL injection in the orderField parameter an...
EUVD-2023-1188
Malicious code in bioql PyPI...
EUVD-2022-7395
Malicious code in bioql PyPI...
EUVD-2023-1726
Malicious code in bioql PyPI...
EUVD-2023-0846
Malicious code in bioql PyPI...
EUVD-2024-2843
Malicious code in bioql PyPI...
EUVD-2023-1347
Malicious code in bioql PyPI...
EUVD-2025-27451
Malicious code in bioql PyPI...
EUVD-2025-23656
Malicious code in bioql PyPI...
EUVD-2025-18296
Malicious code in bioql PyPI...
EUVD-2022-6745
Malicious code in bioql PyPI...
EUVD-2023-1855
Malicious code in bioql PyPI...
EUVD-2023-1865
Malicious code in bioql PyPI...
EUVD-2022-0762
Malicious code in bioql PyPI...
EUVD-2023-1264
Malicious code in bioql PyPI...
EUVD-2025-23461
Malicious code in bioql PyPI...