EUVD-2024-31977

Malicious code in bioql PyPI...

EUVD-2022-7481

Malicious code in bioql PyPI...

EUVD-2023-27175

Malicious code in bioql PyPI...

EUVD-2023-51023

Malicious code in bioql PyPI...

EUVD-2023-47563

Malicious code in bioql PyPI...

EUVD-2025-8224

Malicious code in bioql PyPI...

EUVD-2021-31429

Malicious code in bioql PyPI...

EUVD-2024-19298

Malicious code in bioql PyPI...

EUVD-2022-33490

Malicious code in bioql PyPI...

EUVD-2022-49830

Malicious code in bioql PyPI...

aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1463 more potentially affected by CVE-2025-59682 via django (>=5.2.0 <=5.2.6)

django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-59682 Source advisory: OSV:GHSA-Q95W-C7QG-HRFF...

aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1463 more potentially affected by CVE-2025-59681 via django (>=5.2.0 <=5.2.6)

django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-59681 Source advisory: OSV:GHSA-HPR9-3M2G-3J9P...

Malicious code in org.mixedrealitytoolkit.standardassets (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-43791

Multiple cross-site scripting XSS vulnerabilities in Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via a "Rich Text" field when processing user-supplied input in web content structures, document types, or custom assets. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker...

CVE-2025-43791

Multiple cross-site scripting XSS vulnerabilities in Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected...

Leveraging Digital Twin-As-A-Service Towards Continuous and Automated Cybersecurity Certification

Traditional risk assessments rely on manual audits and system scans, often causing operational disruptions and leaving security gaps. To address these challenges, this work presents Security Digital Twin-as-a-Service SDT-aaS, a novel approach that leverages Digital Twin DT technology for automate...

CVE-2025-55238

Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability...

Malicious code in paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa (npm)

The package paleomagnetism-betelgeuse-optimize-css-assets-webpack-plugin-koa was found to contain malicious code...

Malicious code in gravity-optimize-css-assets-webpack-plugin-selenium-rollup-plugin (npm)

The package gravity-optimize-css-assets-webpack-plugin-selenium-rollup-plugin was found to contain malicious code...