EUVD-2024-53468

Malicious code in bioql PyPI...

EUVD-2023-30394

Malicious code in bioql PyPI...

EUVD-2025-2876

Malicious code in bioql PyPI...

EUVD-2024-53477

Malicious code in bioql PyPI...

EUVD-2025-5455

Malicious code in bioql PyPI...

EUVD-2025-5461

Malicious code in bioql PyPI...

EUVD-2022-31964

Malicious code in bioql PyPI...

EUVD-2025-5454

Malicious code in bioql PyPI...

EUVD-2022-35135

Malicious code in bioql PyPI...

EUVD-2025-5531

Malicious code in bioql PyPI...

EUVD-2024-53471

Malicious code in bioql PyPI...

EUVD-2023-37550

Malicious code in bioql PyPI...

EUVD-2024-53475

Malicious code in bioql PyPI...

EUVD-2023-28510

Malicious code in bioql PyPI...

AndSoft e-TMS 跨站脚本漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file...

Ruckus Wireless ICX Switches Cross-site Scripting and Cross-site Request Forgery (CVE-2023-39904)

A vulnerability in the web-based management interface of the RUCKUS ICX product line could allow a remote attacker to execute XSS and CSRF attacks against the user of the interface. To exploit this vulnerability, an attacker would require the targeted user to click a crafted link that would send ...

Ruckus Wireless ICX Switches Cross-site Scripting and Cross-site Request Forgery (CVE-2023-39906)

A vulnerability in the web-based management interface of the RUCKUS ICX product line could allow a remote attacker to execute XSS and CSRF attacks against the user of the interface. To exploit this vulnerability, an attacker would require the targeted user to click a crafted link that would send ...

CVE-2025-26514

StorageGRID formerly StorageGRID Webscale versions prior to 11.8.0.15 and 11.9.0.8 are susceptible to a Reflected Cross-Site Scripting vulnerability. Successful exploit could allow an attacker to view or modify configuration settings or add or modify user accounts but requires the attacker to kno...

CVE-2025-43808

The Commerce component in Liferay Portal 7.3.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and 7.3 service pack 3 through update 35 saves virtual products uploaded to Documents and Media with guest view permission, which...

CVE-2025-43808

The CVE-2025-43808 entry covers Liferay Portal 7.3.0–7.4.3.112 and Liferay DXP 2023.Q4.0–2023.Q4.8 (and related 7.4 GA/update ranges). The issue arises in the Commerce component where uploaded virtual products in Documents and Media inherit guest view permissions, enabling remote attackers to acc...