EUVD-2022-45112

Malicious code in bioql PyPI...

EUVD-2022-43605

Malicious code in bioql PyPI...

EUVD-2022-26146

Malicious code in bioql PyPI...

EUVD-2025-21698

Malicious code in bioql PyPI...

EUVD-2025-19170

Malicious code in bioql PyPI...

EUVD-2021-6603

Malicious code in bioql PyPI...

EUVD-2025-1508

Malicious code in bioql PyPI...

EUVD-2022-40518

Malicious code in bioql PyPI...

EUVD-2021-7005

Malicious code in bioql PyPI...

EUVD-2023-26522

Malicious code in bioql PyPI...

EUVD-2023-40586

Malicious code in bioql PyPI...

EUVD-2022-37279

Malicious code in bioql PyPI...

EUVD-2024-15967

Malicious code in bioql PyPI...

EUVD-2022-32157

Malicious code in bioql PyPI...

CVE-2025-9045: Improper Neutralization of Input During Web Page Generation

The Easy Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widget parameters in versions less than, or equal to, 2.2.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-leve...

CVE-2025-57444: Improper Neutralization of Input During Web Page Generation

An authenticated cross-site scripting XSS vulnerability in the Administrative interface of Radware AlteonOS Web UI Management v33.0.4.50 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description parameter...

CVE-2025-9852: Improper Neutralization of Input During Web Page Generation

The Yoga Schedule Momoyoga plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'momoyoga-schedule' shortcode in all versions up to, and including, 2.9.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible fo...

CVE-2025-10131: Improper Neutralization of Input During Web Page Generation

The All Social Share Options plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'sc' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

PT-2025-39823

Name of the Vulnerable Software and Affected Versions Chef Automate versions prior to 4.13.295 Description Chef Automate versions earlier than 4.13.295 on Linux x86 are susceptible to a condition where an authenticated attacker can access restricted functionality. This is due to improperly...

CVE-2025-6724: Improper Neutralization of Special Elements used in an SQL Command

In Progress Chef Automate, versions earlier than 4.13.295, on Linux x86 platform, an authenticated attacker can gain access to Chef Automate restricted functionality in multiple services via improperly neutralized inputs used in an SQL command...