EUVD-2022-3534

Malicious code in bioql PyPI...

EUVD-2022-3309

Malicious code in bioql PyPI...

EUVD-2022-4381

Malicious code in bioql PyPI...

EUVD-2023-12155

Malicious code in bioql PyPI...

EUVD-2024-33119

Malicious code in bioql PyPI...

EUVD-2024-29275

Malicious code in bioql PyPI...

EUVD-2023-2571

Malicious code in bioql PyPI...

EUVD-2022-1776

Malicious code in bioql PyPI...

EUVD-2022-1583

Malicious code in bioql PyPI...

CVE-2025-58265

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stonehenge Creations Events Manager - OpenStreetMaps stonehenge-em-osm allows Stored XSS.This issue affects Events Manager - OpenStreetMaps: from n/a through = 4.2.1...

CVE-2025-58265

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stonehenge Creations Events Manager – OpenStreetMaps stonehenge-em-osm allows Stored XSS.This issue affects Events Manager – OpenStreetMaps: from n/a through = 4.2.1...

CVE-2025-58265

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Stonehenge Creations Events Manager – OpenStreetMaps stonehenge-em-osm allows Stored XSS.This issue affects Events Manager – OpenStreetMaps: from n/a through = 4.2.1...

CVE-2025-58265

CVE-2025-58265 : Stored XSS in WordPress plugin “Events Manager – OpenStreetMaps” (Stonehenge Creations). Affected: Events Manager – OpenStreetMaps, version range up to 4.2.1. Root cause: improper input neutralization during web page generation, enabling authenticated users to inject scripts that...

PT-2025-38928

Name of the Vulnerable Software and Affected Versions Events Manager – OpenStreetMaps versions through 4.2.1 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious scripts...

CVE-2025-8837 affecting package jasper for versions less than 4.2.1-3

CVE-2025-8837 affecting package jasper for versions less than 4.2.1-3. A patched version of the package is available...

CVE-2025-8835 affecting package jasper for versions less than 4.2.1-3

CVE-2025-8835 affecting package jasper for versions less than 4.2.1-3. A patched version of the package is available...

Subrion CMS 安全漏洞

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into websites and supports a variety of extensions plugins and more. A security vulnerability exists in Subrion CMS version 4.2.1, which stems from insufficient privilege control of the...

CVE-2025-9519

The Easy Timer plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.2.1 via the plugin's shortcodes. This is due to insufficient restriction of shortcode attributes. This makes it possible for authenticated attackers, with Editor-level access and...

CVE-2025-9519

CVE-2025-9519 affects the WordPress plugin Easy Timer (≤ 4.2.1). The issue enables Remote Code Execution via shortcode attributes due to insufficient restriction, exploitable by authenticated users with Editor level access or higher. Reported CVSS v3.1 base score 7.2 (HIGH) with network access, h...

PT-2025-35869

Name of the Vulnerable Software and Affected Versions: Easy Timer plugin for WordPress versions prior to 4.2.2 Description: The Easy Timer plugin for WordPress is susceptible to Remote Code Execution through its shortcodes. This is caused by inadequate restriction of shortcode attributes,...