EUVD-2024-29031

Malicious code in bioql PyPI...

EUVD-2024-36742

Malicious code in bioql PyPI...

EUVD-2024-38619

Malicious code in bioql PyPI...

EUVD-2021-28037

Malicious code in bioql PyPI...

EUVD-2025-15733

Malicious code in bioql PyPI...

EUVD-2023-27733

Malicious code in bioql PyPI...

EUVD-2024-35478

Malicious code in bioql PyPI...

EUVD-2024-37564

Malicious code in bioql PyPI...

EUVD-2024-28470

Malicious code in bioql PyPI...

EUVD-2024-32602

Malicious code in bioql PyPI...

EUVD-2024-29182

Malicious code in bioql PyPI...

EUVD-2023-29039

Malicious code in bioql PyPI...

EUVD-2024-36648

Malicious code in bioql PyPI...

EUVD-2024-52588

Malicious code in bioql PyPI...

EUVD-2023-36634

Malicious code in bioql PyPI...

EUVD-2023-47266

Malicious code in bioql PyPI...

EUVD-2023-27623

Malicious code in bioql PyPI...

QNAP Systems Photo Station 跨站脚本漏洞

QNAP Systems Photo Station is an online photo album from QNAP Systems, Inc. It is used to organize multimedia content photos and videos on Qnap Nas. A cross-site scripting vulnerability exists in QNAP Systems Photo Station that stems from susceptibility to cross-site scripting attacks...

CVE-2025-7684

The Last.fm Recent Album Artwork plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.2. This is due to missing or incorrect nonce validation on the 'lastfmalbumsartwork.php' page. This makes it possible for unauthenticated attackers to update...

CVE-2025-7684

The CVE-2025-7684 issue is confirmed for the WordPress plugin Last.fm Recent Album Artwork (versions up to and including 1.0.2). The root cause is missing/incorrect nonce validation on lastfm_albums_artwork.php, enabling Cross‑Site Request Forgery that can lead to a Stored Cross‑Site Scripting co...