CVE-2025-8726

CVE-2025-8726 affects the WordPress plugin WP Photo Album Plus (versions up to and including 9.0.11.006). The vulnerability is a stored XSS in the wppa_user_upload function, exploitable by authenticated users with Subscriber+ privileges, allowing injection of scripts that run in victims’ browsers...

EUVD-2022-5276

Malicious code in bioql PyPI...

EUVD-2022-29919

Malicious code in bioql PyPI...

EUVD-2022-24661

Malicious code in bioql PyPI...

EUVD-2022-24631

Malicious code in bioql PyPI...

EUVD-2025-24601

Malicious code in bioql PyPI...

EUVD-2025-29018

Malicious code in bioql PyPI...

EUVD-2024-52930

Malicious code in bioql PyPI...

EUVD-2023-32414

Malicious code in bioql PyPI...

EUVD-2022-2392

Malicious code in bioql PyPI...

EUVD-2022-1818

Malicious code in bioql PyPI...

EUVD-2023-26617

Malicious code in bioql PyPI...

EUVD-2024-42372

Malicious code in bioql PyPI...

EUVD-2025-28517

Malicious code in bioql PyPI...

EUVD-2024-27676

Malicious code in bioql PyPI...

CVE-2025-1250

An issue has been discovered in GitLab CE/EE affecting all versions from 15.0 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed an authenticated user to stall background job processing by sending specially crafted commit messages, merge request descriptions, or not...

CVE-2025-1250

Summary (CVE-2025-1250) : A vulnerability in GitLab CE/EE affects versions 15.0 through 18.1.5, 18.2 through 18.2.5, and 18.3 through 18.3.1 that could allow an authenticated user to stall background job processing by sending specially crafted commit messages, merge request descriptions, or notes...

PT-2025-37290

Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 15.0 through 18.1.5 GitLab CE/EE versions 18.2 through 18.2.5 GitLab CE/EE versions 18.3 through 18.3.1 Description: An issue exists in GitLab CE/EE that could allow an authenticated user to disrupt background job...

CVE-2025-59035

CVE-2025-59035 — Indico XSS via LaTeX math rendering : Multiple sources (NVD, Red Hat, OSV, GHSA advisories, Snyk) confirm a Cross-Site Scripting vulnerability in Indico prior to version 3.3.8, triggered when rendering LaTeX math code in contribution or abstract descriptions. A fixed release is I...

Linux Distros Unpatched Vulnerability : CVE-2023-27596

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSIPS is a Session Initiation Protocol SIP server implementation. Prior to versions 3.1.8 and 3.2.5, OpenSIPS crashes when a malformed SDP body is sent...