3556 matches found
CVE-2025-49594
Summary : CVE-2025-49594 affects XWiki OIDC. From version 2.17.1 up to, but not including, 2.18.2, any user with VIEW access to another user’s profile can forge a token for that user. If the instance allows token authentication, this enables authentication as any user whose profile is viewable. I...
XWiki Platform SQL注入漏洞
XWiki Platform is XWiki's open source suite of Wiki platforms for creating web collaboration applications. A SQL injection vulnerability exists in XWiki Platform versions 4.3-milestone-1 through 16.10.9, 17.4.2, and prior to 17.5.0, which stems from an HQL injection in the orderField parameter an...
PT-2025-40900
Name of the Vulnerable Software and Affected Versions XWiki versions 2.17.1 through 2.18.1 Description XWiki OpenID Connect OIDC contains tools for manipulating the OpenID Connect protocol. Individuals with VIEW access to a user profile can generate a token for that user in versions prior to...
EUVD-2023-0846
Malicious code in bioql PyPI...
EUVD-2025-27451
Malicious code in bioql PyPI...
EUVD-2025-23656
Malicious code in bioql PyPI...
EUVD-2023-1399
Malicious code in bioql PyPI...
EUVD-2022-6706
Malicious code in bioql PyPI...
EUVD-2023-1865
Malicious code in bioql PyPI...
EUVD-2023-1188
Malicious code in bioql PyPI...
EUVD-2022-0777
Malicious code in bioql PyPI...
EUVD-2023-0954
Malicious code in bioql PyPI...
EUVD-2022-7232
Malicious code in bioql PyPI...
EUVD-2023-2818
Malicious code in bioql PyPI...
EUVD-2022-6745
Malicious code in bioql PyPI...
EUVD-2022-1025
Malicious code in bioql PyPI...
EUVD-2023-1356
Malicious code in bioql PyPI...
EUVD-2025-12740
Malicious code in bioql PyPI...