EUVD-2022-1504

Malicious code in bioql PyPI...

EUVD-2024-31782

Malicious code in bioql PyPI...

EUVD-2024-34219

Malicious code in bioql PyPI...

EUVD-2022-46440

Malicious code in bioql PyPI...

EUVD-2022-48299

Malicious code in bioql PyPI...

EUVD-2025-8624

Malicious code in bioql PyPI...

EUVD-2025-19384

Malicious code in bioql PyPI...

EUVD-2021-29059

Malicious code in bioql PyPI...

EUVD-2024-49523

Malicious code in bioql PyPI...

EUVD-2022-39539

Malicious code in bioql PyPI...

EUVD-2022-26546

Malicious code in bioql PyPI...

EUVD-2024-47784

Malicious code in bioql PyPI...

EUVD-2024-43438

Malicious code in bioql PyPI...

PT-2025-40459

Name of the Vulnerable Software and Affected Versions Cursor versions 1.6 and below Description Cursor, a code editor for programming with AI, has an issue where Mermaid, used for rendering diagrams, allows embedding images. This can be exploited to exfiltrate sensitive information to a third-par...

iMonitor EAM 安全漏洞

iMonitor EAM is an employee computer network activity monitoring software from iMonitor USA. A security vulnerability exists in iMonitor EAM version 9.6394, which stems from the use of default administrative credentials without mandatory modifications, which could allow a remote attacker to take...

CVE-2025-9353

The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 7.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access an...

PT-2025-38742

Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.5.11 Description CubeCart is an ecommerce software solution. Prior to version 6.5.11, user sessions do not automatically expire after a password change. This allows an attacker who has already compromised an accoun...

CVE-2025-43803

Insecure direct object reference IDOR vulnerability in the Contacts Center widget in Liferay Portal 7.4.0 through 7.4.3.119, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.6, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions allows...

CVE-2025-34200

Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA and SaaS deployments provision the appliance with the network account credentials in clear-text inside /etc/issue, and the file is world-readable by default. An attacker with local shell access can read /etc/issue to...

CVE-2025-10719

CVE-2025-10719 concerns WisdomGarden’s Tronclass LMS, where an Insecure Direct Object Reference flaw lets remote attackers with regular privileges manipulate a parameter to access other users’ files. Root cause appears to be improper authorization on object references. Public summaries in NVD/Red...