EUVD-2023-1726

Malicious code in bioql PyPI...

EUVD-2022-3914

Malicious code in bioql PyPI...

EUVD-2022-6474

Malicious code in bioql PyPI...

EUVD-2022-0950

Malicious code in bioql PyPI...

EUVD-2025-28814

Malicious code in bioql PyPI...

EUVD-2024-51459

Malicious code in bioql PyPI...

EUVD-2025-26646

Malicious code in bioql PyPI...

EUVD-2024-2865

Malicious code in bioql PyPI...

EUVD-2022-4431

Malicious code in bioql PyPI...

EUVD-2025-4561

Malicious code in bioql PyPI...

EUVD-2023-2129

Malicious code in bioql PyPI...

EUVD-2022-2406

Malicious code in bioql PyPI...

EUVD-2024-2528

Malicious code in bioql PyPI...

EUVD-2023-0368

Malicious code in bioql PyPI...

EUVD-2023-50881

Malicious code in bioql PyPI...

EUVD-2022-1305

Malicious code in bioql PyPI...

Security Bulletin: Due to the use of CKEditor, IBM Engineering Lifecycle Management - Jazz Foundation is affected by a Cross-Site scripting vulnerability

Summary Below vulnerability has been identified in CKEditor, which has been addressed by IBM Engineering Lifecycle Management - Jazz Foundation. Vulnerability Details CVEID:CVE-2023-4771 DESCRIPTION: A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15....

CVE-2025-59547

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1.0, the CKEditor file upload endpoint has insufficient sanitization for filenames allowing probing network endpoints. A specially crafted request can be made to upload a...

Improper Handling of Unicode Encoding

Overview DotNetNuke.Core is a references provider to the DotNetNuke.dll to develop extensions for the DNN Platform. Affected versions of this package are vulnerable to Improper Handling of Unicode Encoding in the CKEditor file upload endpoint. An attacker can probing internal network endpoints by...

CVE-2025-59547

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1.0, the CKEditor file upload endpoint has insufficient sanitization for filenames allowing probing network endpoints. A specially crafted request can be made to upload a...