EUVD-2023-41952

Malicious code in bioql PyPI...

EUVD-2022-24419

Malicious code in bioql PyPI...

EUVD-2023-56333

Malicious code in bioql PyPI...

EUVD-2024-19800

Malicious code in bioql PyPI...

EUVD-2025-24201

Malicious code in bioql PyPI...

EUVD-2025-8127

Malicious code in bioql PyPI...

EUVD-2024-53109

Malicious code in bioql PyPI...

EUVD-2024-54230

Malicious code in bioql PyPI...

EUVD-2023-56334

Malicious code in bioql PyPI...

EUVD-2023-46588

Malicious code in bioql PyPI...

EUVD-2025-17126

Malicious code in bioql PyPI...

EUVD-2023-31133

Malicious code in bioql PyPI...

EUVD-2022-0904

Malicious code in bioql PyPI...

EUVD-2023-46582

Malicious code in bioql PyPI...

EUVD-2021-6807

Malicious code in bioql PyPI...

CVE-2025-9206 Meks Easy Maps <= 2.1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

The Meks Easy Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post title field in all version up to, and including, 2.1.4. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

LiteLLM Information health API_KEY Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LiteLLM. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the APIKEY parameter provided to the health endpoint. The issue results from...

CVE-2025-34182

In Deciso OPNsense before 25.7.4, when creating an "Interfaces: Devices: Point-to-Point" entry, the value of the parameter ptpid is not sanitized of HTML-related characters/strings. This value is directly displayed when visiting the page/interfacesassign.php, which can result in stored cross-site...

DEBIAN-CVE-2025-54293

Path Traversal in the log file retrieval function in Canonical LXD 5.0 LTS on Linux allows authenticated remote attackers to read arbitrary files on the host system via crafted log file names or symbolic links...

CVE-2025-20361 Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of...