EUVD-2025-99758

Malicious code in yanti-takokak58-riris npm...

EUVD-2025-105345

Malicious code in fajar-moci23-breki npm...

EUVD-2025-90729

Malicious code in kiki-lapis78-miaww npm...

EUVD-2025-89487

Malicious code in philosophicaldamselflyz3n npm...

EUVD-2025-89760

Malicious code in objectivetakinz3n npm...

EUVD-2025-88402

Malicious code in tomi-kupang31-miaww npm...

EUVD-2025-76575

Malicious code in incrediblecaribou-smiletea npm...

EUVD-2025-79526

Malicious code in convincingmastodonz3n npm...

EUVD-2025-78738

Malicious code in neartarantulaz3n npm...

EUVD-2025-63014

Malicious code in moralwoodpeckerz3n npm...

EUVD-2025-53081

Malicious code in naval-lime-lemming npm...

EUVD-2025-50578

Malicious code in chronicangelfishz3n npm...

EUVD-2025-44259

Malicious code in yuni-liwet34-sukiwir npm...

EUVD-2025-46404

Malicious code in maya-klipo65-sukiwir npm...

EUVD-2025-44278

Malicious code in yuni-empal28-sukiwir npm...

EUVD-2025-41175

Malicious code in eko-dradag77-breki npm...

EUVD-2025-38161

IBM OpenPages 9.1, and 9.0 with Watson is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...

EUVD-2025-37804

Not used...

EUVD-2025-37578

The Centangle-Team plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to modify plugin's settings via a forged reques...

EUVD-2025-37648

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in watchOS 26.1, iOS 26.1 and iPadOS 26.1, Safari 26.1, visionOS 26.1. Visiting a malicious website may lead to user interface spoofing...