273 matches found
CVE-2025-65858
A Stored Cross-Site Scripting XSS vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username' field during user creation. The payload is stored unsanitized and later executed when the /ajax/listusers endpoint is accessed...
CVE-2025-65858
A Stored Cross-Site Scripting XSS vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username' field during user creation. The payload is stored unsanitized and later executed when the /ajax/listusers endpoint is accessed...
CVE-2025-65858
A Stored Cross-Site Scripting XSS vulnerability in Calibre-Web v0.6.25 allows attackers to inject malicious JavaScript into the 'username' field during user creation. The payload is stored unsanitized and later executed when the /ajax/listusers endpoint is accessed...
CVE-2025-65858
Calibre-Web has a Stored XSS in the username field during user creation (v0.6.25). The payload is stored unsanitized and later executed when /ajax/listusers is accessed. Affected component: Calibre-Web web app; root cause is lack of input sanitization for the username field, enabling injected Jav...
EUVD-2021-12804
Malware in sbrugna...
EUVD-2020-4928
Malware in sbrugna...
EUVD-2021-12803
Malware in sbrugna...
EUVD-2022-0745
Malicious code in bioql PyPI...
EUVD-2022-15984
Malicious code in bioql PyPI...
EUVD-2025-22540
Malicious code in bioql PyPI...
EUVD-2022-1265
Malicious code in bioql PyPI...
EUVD-2024-3244
Malicious code in bioql PyPI...
EUVD-2023-1336
Malicious code in bioql PyPI...
EUVD-2022-0734
Malicious code in bioql PyPI...
EUVD-2022-0728
Malicious code in bioql PyPI...
EUVD-2024-3282
Malicious code in bioql PyPI...
EUVD-2025-22546
Malicious code in bioql PyPI...
EUVD-2022-1437
Malicious code in bioql PyPI...