EUVD-2025-28418

Malicious code in bioql PyPI...

EUVD-2024-37638

Malicious code in bioql PyPI...

EUVD-2024-35535

Malicious code in bioql PyPI...

EUVD-2023-34332

Malicious code in bioql PyPI...

EUVD-2024-46112

Malicious code in bioql PyPI...

EUVD-2023-27824

Malicious code in bioql PyPI...

EUVD-2025-12635

Malicious code in bioql PyPI...

EUVD-2025-10538

Malicious code in bioql PyPI...

EUVD-2024-17069

Malicious code in bioql PyPI...

EUVD-2023-23509

Malicious code in bioql PyPI...

EUVD-2024-46118

Malicious code in bioql PyPI...

EUVD-2024-2834

Malicious code in bioql PyPI...

EUVD-2024-51486

Malicious code in bioql PyPI...

CVE-2024-6429

A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain conditions, error messages are passed through URL parameters without validation, allowing malicious actors to inject arbitrary content into the UI. By exploiting this...

WSO2 Identity Server Apps allows content spoofing in logs

A content spoofing issue exists in WSO2 Identity Server Apps, specifically in the Authentication Portal, due to improper handling of authentication error messages. When an authentication failure occurs, the portal previously accepted an authFailureMsg value supplied via URL and rendered it in the...

GHSA-R6F3-55WJ-G9P3 WSO2 Identity Server Apps allows content spoofing in logs

A content spoofing issue exists in WSO2 Identity Server Apps, specifically in the Authentication Portal, due to improper handling of authentication error messages. When an authentication failure occurs, the portal previously accepted an authFailureMsg value supplied via URL and rendered it in the...

CVE-2024-6429

A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain conditions, error messages are passed through URL parameters without validation, allowing malicious actors to inject arbitrary content into the UI. By exploiting this...

CVE-2024-6429

A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain conditions, error messages are passed through URL parameters without validation, allowing malicious actors to inject arbitrary content into the UI. By exploiting this...

CVE-2024-6429

The CVE-2024-6429 entry describes a content spoofing vulnerability in WSO2 products caused by improper handling/validation of error messages passed through URL parameters, enabling attackers to inject arbitrary UI content and facilitate social-engineering attacks. Affected components include WSO2...

CVE-2024-6429 Content Spoofing in Multiple WSO2 Products via Error Message Injection

A content spoofing vulnerability exists in multiple WSO2 products due to improper error message handling. Under certain conditions, error messages are passed through URL parameters without validation, allowing malicious actors to inject arbitrary content into the UI. By exploiting this...