EUVD-2024-36714

Malicious code in bioql PyPI...

EUVD-2023-2247

Malicious code in bioql PyPI...

EUVD-2022-7337

Malicious code in bioql PyPI...

EUVD-2022-52830

Malicious code in bioql PyPI...

EUVD-2023-2330

Malicious code in bioql PyPI...

EUVD-2023-0009

Malicious code in bioql PyPI...

EUVD-2025-29163

Malicious code in bioql PyPI...

EUVD-2022-0325

Malicious code in bioql PyPI...

EUVD-2023-1901

Malicious code in bioql PyPI...

EUVD-2024-30508

Malicious code in bioql PyPI...

EUVD-2024-17156

Malicious code in bioql PyPI...

CVE-2025-60116

Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Conference Theme Custom Post Type: from n/a through 2.6.4...

CVE-2025-60116

Missing Authorization vulnerability in ThemeGoods Grand Conference Theme Custom Post Type grandconference-custom-post allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Grand Conference Theme Custom Post Type: from n/a through 2.6.4...

CVE-2025-60116

CVE-2025-60116: Missing Authorization in Grand Conference Theme Custom Post Type (WordPress). Affected software: Grand Conference Theme Custom Post Type up to version 2.6.3. Root cause: incorrectly configured access control/security levels enabling unauthorized actions on the custom post type. Ex...

WordPress Kubio AI Page Builder plugin <= 2.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Installation vulnerability

Missing Authorization to Authenticated Subscriber+ Limited Plugin Installation vulnerability discovered by wesley wcraft in WordPress Plugin Kubio AI Page Builder versions = 2.6.3...

CVE-2025-10650 Improper SSH Key Handling in Internal Debug Builds May Grant Cluster-Level Access to Non-Administrative Users

SoftIron HyperCloud 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, allowing unauthorized privilege escalation to admin via SSH. Affects non-production debug and internal development builds created between versions 2.5.0 a...

SoftIron HyperCloud 安全漏洞

SoftIron HyperCloud is an intelligent cloud architecture from SoftIron. A security vulnerability exists in SoftIron HyperCloud versions 2.5.0 through 2.6.3 that stems from incorrectly adding a user SSH key to an administrator-level authorization key, which could lead to unauthorized elevation of...

PT-2025-38474

Name of the Vulnerable Software and Affected Versions SoftIron HyperCloud versions 2.5.0 through 2.6.3 Description SoftIron HyperCloud versions 2.5.0 through 2.6.3 may incorrectly add user SSH keys to the administrator-level authorized keys under certain conditions, potentially allowing...

CVE-2025-10434

A vulnerability was identified in IbuyuCMS up to 2.6.3. Impacted is an unknown function of the file /admin/article.php?a=mod of the component Add Article Page. The manipulation of the argument Title leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is...

CVE-2025-10434 IbuyuCMS Add Article article.php cross site scripting

A vulnerability was identified in IbuyuCMS up to 2.6.3. Impacted is an unknown function of the file /admin/article.php?a=mod of the component Add Article Page. The manipulation of the argument Title leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is...