EUVD-2023-56219

Malicious code in bioql PyPI...

EUVD-2022-0049

Malicious code in bioql PyPI...

EUVD-2022-0269

Malicious code in bioql PyPI...

EUVD-2022-0082

Malicious code in bioql PyPI...

EUVD-2022-0412

Malicious code in bioql PyPI...

EUVD-2022-0036

Malicious code in bioql PyPI...

EUVD-2022-0031

Malicious code in bioql PyPI...

EUVD-2022-0157

Malicious code in bioql PyPI...

EUVD-2025-24947

Malicious code in bioql PyPI...

EUVD-2025-28708

Malicious code in bioql PyPI...

EUVD-2024-30318

Malicious code in bioql PyPI...

EUVD-2022-34498

Malicious code in bioql PyPI...

EUVD-2023-58785

Malicious code in bioql PyPI...

DRUPAL-CONTRIB-2025-110

This module allows you to use different currencies on your website and do currency conversion. The module doesn't sufficiently protect routes used to enable and disable currencies from Cross-Site Request Forgery CSRF attacks, potentially allowing an attacker to trick an admin into changing settin...

Drupal Currency module < 3.5.0 - Unauthenticated Cross Site Request Forgery (CSRF) vulnerability

Unauthenticated Cross Site Request Forgery CSRF vulnerability discovered by Juraj Nemec poker10 in WordPress Module Currency versions 3.5.0...

Currency - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2025-110

This module allows you to use different currencies on your website and do currency conversion. The module doesn't sufficiently protect routes used to enable and disable currencies from Cross-Site Request Forgery CSRF attacks, potentially allowing an attacker to trick an admin into changing settin...

Malicious code in fortnite-v-bucks-generator-2023-dkzldz (npm)

The package fortnite-v-bucks-generator-2023-dkzldz was found to contain malicious code...

CVE-2025-41039 Stored Cross-Site Scripting vulnerability in appRain CMF

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'datasconfigadminlandingpage', 'datasconfigcurrency', 'datasconfigdbversion', 'datasconfigdefaultpagination',...

MAL-2025-41490 Malicious code in @twork-data-services/currency-config (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-8982

A vulnerability was determined in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects unknown code of the file /admin/operations/currency.php. The manipulation of the argument currcode leads to sql injection. The attack can be initiated remotely. The exploit has...