8465 matches found
CVE-2025-61681
KUNO CMS is a fully deployable full-stack blog application. Versions 1.3.13 and below contain validation flaws in its file upload functionality that can be exploited for stored XSS. The upload endpoint only validates file types based on Content-Type headers, lacks file content analysis and...
EUVD-2025-32427
KUNO CMS is a fully deployable full-stack blog application. Versions 1.3.13 and below contain validation flaws in its file upload functionality that can be exploited for stored XSS. The upload endpoint only validates file types based on Content-Type headers, lacks file content analysis and...
CVE-2025-61681 Kuno is Vulnerable to Stored XSS Attack via SVG File Upload
KUNO CMS is a fully deployable full-stack blog application. Versions 1.3.13 and below contain validation flaws in its file upload functionality that can be exploited for stored XSS. The upload endpoint only validates file types based on Content-Type headers, lacks file content analysis and...
EUVD-2025-6981
Malicious code in bioql PyPI...
EUVD-2025-28373
Malicious code in bioql PyPI...
EUVD-2024-49825
Malicious code in bioql PyPI...
EUVD-2024-47852
Malicious code in bioql PyPI...
EUVD-2024-39195
Malicious code in bioql PyPI...
EUVD-2024-36405
Malicious code in bioql PyPI...
EUVD-2022-4094
Malicious code in bioql PyPI...
EUVD-2025-30220
Malicious code in bioql PyPI...
EUVD-2022-27871
Malicious code in bioql PyPI...
EUVD-2025-15089
Malicious code in bioql PyPI...
EUVD-2024-33650
Malicious code in bioql PyPI...
EUVD-2023-59270
Malicious code in bioql PyPI...
EUVD-2025-10020
Malicious code in bioql PyPI...
EUVD-2025-25418
Malicious code in bioql PyPI...
EUVD-2024-49700
Malicious code in bioql PyPI...