EUVD-2022-38375

Malicious code in bioql PyPI...

EUVD-2021-29073

Malicious code in bioql PyPI...

EUVD-2022-31836

Malicious code in bioql PyPI...

EUVD-2022-44075

Malicious code in bioql PyPI...

EUVD-2025-14713

Malicious code in bioql PyPI...

EUVD-2022-38378

Malicious code in bioql PyPI...

EUVD-2025-14716

Malicious code in bioql PyPI...

EUVD-2024-52815

Malicious code in bioql PyPI...

EUVD-2022-31835

Malicious code in bioql PyPI...

EUVD-2021-29078

Malicious code in bioql PyPI...

EUVD-2023-33405

Malicious code in bioql PyPI...

EUVD-2025-14714

Malicious code in bioql PyPI...

EUVD-2022-50735

Malicious code in bioql PyPI...

EUVD-2021-29074

Malicious code in bioql PyPI...

CVE-2024-33668

An issue was discovered in Zammad before 6.3.0. The Zammad Upload Cache uses insecure, partially guessable FormIDs to identify content. An attacker could try to brute force them to upload malicious content to article drafts they have no access to...

CVE-2024-33667

An issue was discovered in Zammad before 6.3.0. An authenticated agent could perform a remote Denial of Service attack by calling an endpoint that accepts a generic method name, which was not properly sanitized against an allowlist...

CVE-2024-33666

An issue was discovered in Zammad before 6.3.0. Users with customer access to a ticket could have accessed time accounting details of this ticket via the API. This data should be available only to agents...

CVE-2024-55578

Zammad before 6.4.1 places sensitive data such as authmicrosoftoffice365credentials and applicationsecret in log files...

CVE-2023-50456

An issue was discovered in Zammad before 6.2.0. An attacker can trigger phishing links in generated notification emails via a crafted first or last name...

CVE-2023-50453

An issue was discovered in Zammad before 6.2.0. It uses the public endpoint /api/v1/signshow for its login screen. This endpoint returns internal configuration data of user object attributes, such as selectable values, which should not be visible to the public...