EUVD-2025-6764

Malicious code in bioql PyPI...

CVE-2024-55009

A reflected cross-site scripting XSS vulnerability in AutoBib - Bibliographic collection management system 3.1.140 and earlier allows attackers to execute arbitrary Javascript in the context of a victim's browser via injecting a crafted payload into the WCE=topFrame= parameter...

CVE-2024-55009

A reflected cross-site scripting XSS vulnerability in AutoBib - Bibliographic collection management system 3.1.140 and earlier allows attackers to execute arbitrary Javascript in the context of a victim's browser via injecting a crafted payload into the WCE=topFrame&WCU= parameter...

CVE-2024-55009

A reflected cross-site scripting XSS vulnerability in AutoBib - Bibliographic collection management system 3.1.140 and earlier allows attackers to execute arbitrary Javascript in the context of a victim's browser via injecting a crafted payload into the WCE=topFrame&WCU= parameter...

CVE-2024-55009

CVE-2024-55009 refers to a reflected XSS in AutoBib - Bibliographic collection management system (versions 3.1.140 and earlier). The vulnerability allows an attacker to cause arbitrary JavaScript execution in a victim’s browser by injecting a crafted payload into the WCE=topFrame&WCU= parameter. ...

PT-2025-11974

Name of the Vulnerable Software and Affected Versions AutoBib - Bibliographic collection management system versions 3.1.140 and earlier Description A reflected cross-site scripting XSS issue allows attackers to execute arbitrary Javascript in the context of a victim's browser. This is achieved by...

CVE-2024-55009

A reflected cross-site scripting XSS vulnerability in AutoBib - Bibliographic collection management system 3.1.140 and earlier allows attackers to execute arbitrary Javascript in the context of a victim's browser via injecting a crafted payload into the WCE=topFrame&WCU= parameter...

CVE-2024-55009

A reflected cross-site scripting XSS vulnerability in AutoBib - Bibliographic collection management system 3.1.140 and earlier allows attackers to execute arbitrary Javascript in the context of a victim's browser via injecting a crafted payload into the WCE=topFrame&WCU= parameter...

Autobib security vulnerabilities

Autobib is an Autobib open source command line tool for managing bibliographic records. A security vulnerability exists in Autobib 3.1.140 and earlier versions, which originates from reflective cross-site scripting and could lead to an attacker executing arbitrary Javascript in the victim's brows...

CVE-2024-55009: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in AutoBib - Bibliographic collection management system 3.1.140 and earlier allows attackers to execute arbitrary Javascript in the context of a victim's browser via injecting a crafted payload into the WCE=topFrame&WCU= parameter...

arcor2-execution-rest-proxy (>=0.8.1, <=0.16.0), crfm-helm (>=0.1.0, <=0.5.4) +8 more potentially affected by CVE-2024-35515 via sqlitedict (1.7.0)

sqlitedict PYPI version 1.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on sqlitedict and may be impacted: - arcor2-execution-rest-proxy =0.8.1, =0.1.0, =0.0.1, =0.1.1, =0.1.3, =0.5.9, =0.1.0, =0.0.1.3, =0.0.1.320220108150357 Source cves:...