EUVD-2022-28174

Malicious code in bioql PyPI...

EUVD-2022-1111

Malicious code in bioql PyPI...

EUVD-2023-36741

Malicious code in bioql PyPI...

EUVD-2022-31648

Malicious code in bioql PyPI...

EUVD-2025-25724

Malicious code in bioql PyPI...

EUVD-2022-1995

Malicious code in bioql PyPI...

EUVD-2025-24095

Malicious code in bioql PyPI...

EUVD-2025-30915

Malicious code in bioql PyPI...

EUVD-2024-0628

Malicious code in bioql PyPI...

EUVD-2025-10883

Malicious code in bioql PyPI...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

Yzmcms 安全漏洞

Yzmcms is an open source CMS Content Management System from Yzmcms Open Source. A security vulnerability exists in Yzmcms 7.3 and earlier versions, which stems from improper handling of the referer header on the registration page and may lead to cross-site scripting attacks...

PT-2025-39181

Name of the Vulnerable Software and Affected Versions YzmCMS versions through 7.3 Description A cross-site scripting issue exists in YzmCMS. The issue is related to the handling of the referer header on the register page, which could allow for malicious code execution. The referer header is a...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

CVE-2025-56304

Cross-site scripting XSS vulnerability in YzmCMS thru 7.3 via the referer header in the register page...

CVE-2025-56304

CVE-2025-56304 is an XSS vulnerability affecting YzmCMS up to version 7.3, caused by improper handling of the referer header on the registration page. The issue could allow crafted input via the referer header to be reflected in the app, enabling cross-site scripting with user interaction require...

Cross-site Scripting (XSS)

Liferay Portal is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper input validation because the application fails to sanitize the referer or FORWARDURL parameters, allowing attackers to inject JavaScript using %00...

Linux Distros Unpatched Vulnerability : CVE-2020-7996

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - htdocs/user/passwordforgotten.php in Dolibarr 10.0.6 allows XSS via the Referer HTTP header. CVE-2020-7996 Note that Nessus relies on the presence of the packag...