EUVD-2023-46588

Malicious code in bioql PyPI...

EUVD-2022-25114

Malicious code in bioql PyPI...

EUVD-2021-6807

Malicious code in bioql PyPI...

EUVD-2024-3591

Malicious code in bioql PyPI...

EUVD-2023-36441

Malicious code in bioql PyPI...

EUVD-2022-25248

Malicious code in bioql PyPI...

EUVD-2023-36440

Malicious code in bioql PyPI...

EUVD-2023-56331

Malicious code in bioql PyPI...

EUVD-2025-22489

Malicious code in bioql PyPI...

EUVD-2024-50298

Malicious code in bioql PyPI...

EUVD-2025-8127

Malicious code in bioql PyPI...

EUVD-2025-1767

Malicious code in bioql PyPI...

EUVD-2023-45077

Malicious code in bioql PyPI...

EUVD-2023-43148

Malicious code in bioql PyPI...

EUVD-2022-0904

Malicious code in bioql PyPI...

EUVD-2025-31694

Malicious code in bioql PyPI...

EUVD-2025-17126

Malicious code in bioql PyPI...

CVE-2025-9206 Meks Easy Maps <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Meks Easy Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title field in all version up to, and including, 2.1.4. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

LiteLLM Information health API_KEY Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LiteLLM. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the APIKEY parameter provided to the health endpoint. The issue results from...

CVE-2025-34182

In Deciso OPNsense before 25.7.4, when creating an "Interfaces: Devices: Point-to-Point" entry, the value of the parameter ptpid is not sanitized of HTML-related characters/strings. This value is directly displayed when visiting the page/interfacesassign.php, which can result in stored cross-site...