EUVD-2024-36945

Malicious code in bioql PyPI...

EUVD-2025-7976

Malicious code in bioql PyPI...

EUVD-2022-33987

Malicious code in bioql PyPI...

EUVD-2025-24704

Malicious code in bioql PyPI...

EUVD-2022-31872

Malicious code in bioql PyPI...

EUVD-2021-32554

Malicious code in bioql PyPI...

EUVD-2022-33989

Malicious code in bioql PyPI...

EUVD-2022-34006

Malicious code in bioql PyPI...

EUVD-2022-33992

Malicious code in bioql PyPI...

EUVD-2022-34014

Malicious code in bioql PyPI...

CVE-2025-57393

A stored cross-site scripting XSS in Kissflow Work Platform Kissflow Application Versions 7337 Account v2.0 to v4.2vallows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

CVE-2025-57393

A stored cross-site scripting XSS in Kissflow Work Platform Kissflow Application Versions 7337 Account v2.0 to v4.2vallows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

Django 安全漏洞

Django is a set of open source web application frameworks based on the Python language from the Django Foundation. The framework includes an object-oriented mapper, view system, template system, and more. A security vulnerability exists in Django version 4.2 up to and including version 4.2.25,...

CVE-2025-59682

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. The django.utils.archive.extract function, used by the "startapp --template" and "startproject --template" commands, allows partial directory traversal via an archive with file paths sharing a common...

PT-2025-40284

Name of the Vulnerable Software and Affected Versions Kissflow Work Platform Kissflow Application versions 2.0 through 4.2 Description A stored cross-site scripting XSS issue exists in Kissflow Work Platform Kissflow Application. This allows attackers to execute arbitrary web scripts or HTML by...

CVE-2025-59681

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...

CVE-2025-56132

LiquidFiles filetransfer server is vulnerable to a user enumeration issue in its password reset functionality. The application returns distinguishable responses for valid and invalid email addresses, allowing unauthenticated attackers to determine the existence of user accounts. Version 4.2...

WordPress Content Views plugin <= 4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Grid and List Widgets vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Grid and List Widgets vulnerability discovered by Webbernaut in WordPress Plugin Content Views versions = 4.1...

Linux Distros Unpatched Vulnerability : CVE-2023-35131

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Content on the groups page required additional sanitizing to prevent an XSS risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8 and 3.11 to...

CVE-2025-58056 Netty is vulnerable to request smuggling due to incorrect parsing of chunk extensions

Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients. In versions 4.1.124.Final, and 4.2.0.Alpha3 through 4.2.4.Final, Netty incorrectly accepts standalone newline characters LF as a chunk-size line...