EUVD-2023-49356

Malicious code in bioql PyPI...

EUVD-2023-49362

Malicious code in bioql PyPI...

EUVD-2025-31218

Malicious code in bioql PyPI...

EUVD-2023-45793

Malicious code in bioql PyPI...

EUVD-2023-45807

Malicious code in bioql PyPI...

EUVD-2024-49347

Malicious code in bioql PyPI...

EUVD-2024-24375

Malicious code in bioql PyPI...

EUVD-2025-10905

Malicious code in bioql PyPI...

EUVD-2024-19514

Malicious code in bioql PyPI...

EUVD-2023-49365

Malicious code in bioql PyPI...

EUVD-2023-37191

Malicious code in bioql PyPI...

EUVD-2023-49358

Malicious code in bioql PyPI...

EUVD-2023-37193

Malicious code in bioql PyPI...

EUVD-2023-43026

Malicious code in bioql PyPI...

EUVD-2023-45794

Malicious code in bioql PyPI...

CVE-2025-60449

An information disclosure vulnerability has been discovered in SeaCMS 13.1. The vulnerability exists in the adminsafe.php component located in the /btcoan/ directory. This security flaw allows authenticated administrators to scan and download not only the application’s source code but also...

CVE-2025-10306

The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the processbackupbatch function. This makes it possible for authenticated attackers, with Administrator-level access and above, to download...

CVE-2025-10306

CVE-2025-10306 – Backup Bolt (WordPress) is a vulnerability in the Backup Bolt plugin affecting all versions up to and including 1.4.1. The flaw, located in process_backup_batch(), allows authenticated attackers with Administrator-level access to download directories outside the webroot and write...

CVE-2025-10306 Backup Bolt <= 1.4.1 - Authenticated (Admin+) Arbitrary File Download

The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the processbackupbatch function. This makes it possible for authenticated attackers, with Administrator-level access and above, to download...

CVE-2025-9332 Interactive Medical Drawing of Human Body <= 2.6 - Authenticated (Admin+) Stored Cross-Site Scripting

The Interactive Human Anatomy with Clickable Body Parts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...