EUVD-2024-17094

Malicious code in bioql PyPI...

EUVD-2022-43054

Malicious code in bioql PyPI...

EUVD-2024-47160

Malicious code in bioql PyPI...

EUVD-2022-34782

Malicious code in bioql PyPI...

EUVD-2022-5635

Malicious code in bioql PyPI...

EUVD-2022-49962

Malicious code in bioql PyPI...

EUVD-2021-34210

Malicious code in bioql PyPI...

EUVD-2023-58328

Malicious code in bioql PyPI...

EUVD-2025-20989

Malicious code in bioql PyPI...

EUVD-2022-1707

Malicious code in bioql PyPI...

EUVD-2022-38612

Malicious code in bioql PyPI...

WordPress Schema Plugin For Divi, Gutenberg & Shortcodes plugin <= 4.3.2 - Authenticated (Contributor+) Object Instantiation vulnerability

Authenticated Contributor+ Object Instantiation vulnerability discovered by ch4r0n in WordPress Plugin WordPress Schema Plugin For Divi, Gutenberg & Shortcodes versions = 4.3.2...

Content Injection

Next.js is vulnerable to content injection. The vulnerability is due to attacker-controlled external image sources being able to trigger file downloads with arbitrary content and filenames under specific configurations, which allows an attacker to perform phishing or deliver malicious files...

Perfex CRM 跨站脚本漏洞

Perfex CRM is a customer relationship management software from Perfex CRM open source. It is used to manage customers, projects and create invoices in the cloud. A cross-site scripting vulnerability exists in Perfex CRM version 3.2.1, which stems from insufficient validation of user input and cou...

CVE-2025-9642

An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could allow an attacker to inject malicious content that may lead to account takeover...

WordPress Norebro Extra plugin <= 1.6.8 - Content Injection vulnerability

Content Injection vulnerability discovered by 0xd4rk5id3 in WordPress Plugin Norebro Extra versions = 1.6.8...

WordPress WP Recipe Maker plugin < 10.1.0 - Content Injection vulnerability

Content Injection vulnerability discovered by Najib Sinjari in WordPress Plugin WP Recipe Maker versions 10.1.0...

WordPress XStore theme < 9.6 - Content Injection vulnerability

Content Injection vulnerability discovered by Rafie Muhammad Patchstack in WordPress Theme XStore versions 9.6...

WordPress Contact Form 7 Dynamic Text Extension plugin <= 5.0.5 - Content Injection vulnerability

Content Injection vulnerability discovered by Najib Sinjari in WordPress Plugin Contact Form 7 – Dynamic Text Extension versions = 5.0.5...

CVE-2025-9642

An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could allow an attacker to inject malicious content that may lead to account takeover...