EUVD-2019-7004

Malware in sbrugna...

EUVD-2019-16389

Malware in sbrugna...

EUVD-2016-10634

Malware in sbrugna...

EUVD-2018-0750

Malware in sbrugna...

EUVD-2017-0006

Malware in sbrugna...

EUVD-2017-1507

Malware in sbrugna...

EUVD-2023-52313

Malicious code in bioql PyPI...

EUVD-2024-20705

Malicious code in bioql PyPI...

EUVD-2025-14288

Malicious code in bioql PyPI...

EUVD-2025-22327

Malicious code in bioql PyPI...

EUVD-2025-22332

Malicious code in bioql PyPI...

EUVD-2023-45031

Malicious code in bioql PyPI...

EUVD-2024-20706

Malicious code in bioql PyPI...

EUVD-2024-28083

Malicious code in bioql PyPI...

EUVD-2024-28049

Malicious code in bioql PyPI...

EUVD-2022-47691

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Name field in Kaleo Forms Admin. An attacker can execute arbitrary JavaScript code in the context of the user's browser by injecting a malicious payload that is stored and rendered without proper...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the WEEKEND-PLANS field. An attacker can execute arbitrary code in the context of the affected application by submitting a specially crafted payload. Details Cross-site scripting or XSS is a code vulnerabili...

CVE-2025-51859

Stored Cross-Site Scripting XSS vulnerability in Chaindesk thru 2025-05-26 in its agent chat component. An attacker can achieve arbitrary client-side script execution by crafting an AI agent whose system prompt instructs the underlying Large Language Model LLM to embed malicious script payloads...

CVE-2025-51860

Stored Cross-Site Scripting XSS in TelegAI telegai.com 2025-05-26 in its chat component and character container component. An attacker can achieve arbitrary client-side script execution by crafting an AI Character with SVG XSS payloads in either description, greeting, example dialog, or system...