EUVD-2022-6747

Malicious code in bioql PyPI...

EUVD-2025-24040

Malicious code in bioql PyPI...

EUVD-2022-6883

Malicious code in bioql PyPI...

EUVD-2023-1563

Malicious code in bioql PyPI...

EUVD-2025-0208

Malicious code in bioql PyPI...

EUVD-2022-5675

Malicious code in bioql PyPI...

EUVD-2022-1894

Malicious code in bioql PyPI...

EUVD-2022-2840

Malicious code in bioql PyPI...

EUVD-2022-7644

Malicious code in bioql PyPI...

EUVD-2023-1613

Malicious code in bioql PyPI...

EUVD-2022-3052

Malicious code in bioql PyPI...

EUVD-2022-5504

Malicious code in bioql PyPI...

EUVD-2022-5075

Malicious code in bioql PyPI...

EUVD-2024-3241

Malicious code in bioql PyPI...

EUVD-2023-1840

Malicious code in bioql PyPI...

EUVD-2022-5858

Malicious code in bioql PyPI...

PT-2025-40300

Name of the Vulnerable Software and Affected Versions Luci OpenWRT version 18.06.2 Description A reflected cross-site scripting XSS issue exists in the /admin/system/packages API endpoint of Luci OpenWRT. An attacker can execute arbitrary Javascript in a user's browser by providing a crafted...

Arbitrary Code Injection

Craft CMS is vulnerable to Arbitrary Code Injection. The vulnerability is due to inadequate protection of restore functionality because, with a compromised security key and the ability to place an arbitrary file in storage/backups, an attacker can craft a request to /updater/restore-db that...

Server-Side Template Injection

solspace/craft-freeform is vulnerable to Server-Side Template Injection SSTI. The vulnerability is due to improper input handling because the submission title field in forms allows arbitrary code injection when edited by users with form editing access...

Remote Code Execution (RCE)

craftcms/cms is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling of template inputs in Twig, which allows an attacker to inject malicious templates and execute arbitrary code on the server...