EUVD-2025-19873

Malicious code in bioql PyPI...

EUVD-2024-49413

Malicious code in bioql PyPI...

EUVD-2024-25299

Malicious code in bioql PyPI...

EUVD-2021-28127

Malicious code in bioql PyPI...

EUVD-2023-31014

Malicious code in bioql PyPI...

EUVD-2023-34687

Malicious code in bioql PyPI...

EUVD-2022-39816

Malicious code in bioql PyPI...

EUVD-2023-0067

Malicious code in bioql PyPI...

EUVD-2023-43169

Malicious code in bioql PyPI...

EUVD-2023-33991

Malicious code in bioql PyPI...

EUVD-2024-40832

Malicious code in bioql PyPI...

EUVD-2023-46424

Malicious code in bioql PyPI...

EUVD-2021-30323

Malicious code in bioql PyPI...

EUVD-2022-7179

Malicious code in bioql PyPI...

EUVD-2022-37672

Malicious code in bioql PyPI...

CVE-2025-59774

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59760

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

listmonk: CSRF to XSS Chain can Lead to Admin Account Takeover

Summary Cross-Site Request Forgery CSRF is an attack that forces an end user to execute unwanted actions on a web application in which they’re currently authenticated. With a little help of social engineering such as sending a link via email or chat, an attacker may trick the users of a web...

GHSA-RF24-WG77-GQ7W listmonk: CSRF to XSS Chain can Lead to Admin Account Takeover

Summary Cross-Site Request Forgery CSRF is an attack that forces an end user to execute unwanted actions on a web application in which they’re currently authenticated. With a little help of social engineering such as sending a link via email or chat, an attacker may trick the users of a web...

Wiz Recognized as a Leader in the 2025 IDC MarketScape for ASPM

We believe recognition in the IDC MarketScape for ASPM reflects our commitment to redefining how modern/cloud and AI-native applications are built and secured...