EUVD-2024-30589

Malicious code in bioql PyPI...

EUVD-2024-40791

Malicious code in bioql PyPI...

EUVD-2025-3868

Malicious code in bioql PyPI...

EUVD-2025-15514

Malicious code in bioql PyPI...

EUVD-2024-30508

Malicious code in bioql PyPI...

EUVD-2024-40841

Malicious code in bioql PyPI...

EUVD-2024-45703

Malicious code in bioql PyPI...

EUVD-2022-2510

Malicious code in bioql PyPI...

EUVD-2024-40642

Malicious code in bioql PyPI...

EUVD-2025-9845

Malicious code in bioql PyPI...

EUVD-2024-45516

Malicious code in bioql PyPI...

EUVD-2024-43535

Malicious code in bioql PyPI...

EUVD-2024-42382

Malicious code in bioql PyPI...

firefox security update

An update is available for firefox. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

Flowise vulnerable to XSS

Summary A XSScross-site scripting vulnerability is caused by insufficient filtering of input by web applications. Attackers can leverage this XSS vulnerability to inject malicious script code HTML code or client-side Javascript code into web pages, and when users browse these web pages, the...

GHSA-8C95-HPQ2-W46F NiceGUI has a Reflected XSS

Summary A Cross-Site Scripting XSS risk exists in NiceGUI when developers render unescaped user input into the DOM using ui.html. Before version 3.0, NiceGUI does not enforce HTML or JavaScript sanitization, so applications that directly combine components like ui.input with ui.html without...

CVE-2025-61599 Emlog is Vulnerable to Stored Cross-Site Scripting (XSS) in "Twitter" Feature via Markdown Input

Emlog is an open source website building system. A stored Cross-Site Scripting XSS vulnerability exists in the "Twitter"feature of EMLOG Pro 2.5.21 and below. An authenticated user with privileges to post a "Twitter" message can inject arbitrary JavaScript code. The malicious script is stored on...

pentest-automation-suite

Penetration Testing Automation Tools 🔴 Automated Penetratio...

CVE-2025-61087

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to Cross Site Scripting XSS via the Customer Name field under Customer Management Section...

Bolt before 3.7.2 does not restrict filter options in a Request in the Twig context, and is therefore inconsistent with the "How to Harden Your PHP for Better Security" guidance.

...