EUVD-2023-34355

Malicious code in bioql PyPI...

EUVD-2022-38888

Malicious code in bioql PyPI...

EUVD-2024-0861

Malicious code in bioql PyPI...

EUVD-2024-26089

Malicious code in bioql PyPI...

EUVD-2022-15795

Malicious code in bioql PyPI...

EUVD-2025-5948

Malicious code in bioql PyPI...

EUVD-2022-1258

Malicious code in bioql PyPI...

EUVD-2023-59095

Malicious code in bioql PyPI...

CVE-2025-59835

LangBot is a global IM bot platform designed for LLMs. In versions 4.1.0 up to but not including 4.3.5, authorized attackers can exploit the /api/v1/files/documents interface to perform arbitrary file uploads. Since this interface does not strictly restrict the storage directory of files on the...

CVE-2025-59835 LangBot has a cross-directory file upload vulnerability, which could lead to system takeover

LangBot is a global IM bot platform designed for LLMs. In versions 4.1.0 up to but not including 4.3.5, authorized attackers can exploit the /api/v1/files/documents interface to perform arbitrary file uploads. Since this interface does not strictly restrict the storage directory of files on the...

PT-2025-40417

Name of the Vulnerable Software and Affected Versions LangBot versions 4.1.0 through 4.3.4 Description LangBot is a global IM bot platform designed for LLMs. Authorized attackers can exploit the /api/v1/files/documents interface to perform arbitrary file uploads. The interface does not strictly...

PT-2025-40001

Name of the Vulnerable Software and Affected Versions finance.js version 4.1.0 Description An issue allows a remote attacker to cause a denial of service via the seekZero parameter. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2025-58001

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Syed Balkhi Compact Archives compact-archives allows Stored XSS.This issue affects Compact Archives: from n/a through = 4.1.0...

CVE-2025-58258

Missing Authorization vulnerability in nK Lazy Blocks lazy-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lazy Blocks: from n/a through = 4.1.0...

CVE-2025-58258

Missing Authorization vulnerability in nK Lazy Blocks lazy-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Lazy Blocks: from n/a through = 4.1.0...

WordPress Compact Archives plugin <= 4.1.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by theviper17 in WordPress Plugin Compact Archives versions = 4.1.0...

WordPress Lazy Blocks Plugin <= 4.1.0 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by MD ISMAIL in WordPress Plugin Lazy Blocks versions = 4.1.0...

PT-2025-38921

Name of the Vulnerable Software and Affected Versions nK Lazy Blocks versions through 4.1.0 Description An authorization issue exists in nK Lazy Blocks, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update nK Lazy Blocks to a version later tha...

PT-2025-38851

Name of the Vulnerable Software and Affected Versions Noumaan Yaqoob Compact Archives versions through 4.1.0 Description A flaw exists in Noumaan Yaqoob Compact Archives that allows for Stored Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page...

Nuxt 路径遍历漏洞

Nuxt is a free open source framework from Nuxt Open Source. A path traversal vulnerability exists in Nuxt versions prior to 3.19.0 and prior to 4.1.0, which stems from a path traversal issue in the client-side payload recovery mechanism that could lead to an attacker manipulating client-side...