EUVD-2025-25472

Malicious code in bioql PyPI...

CVE-2025-47184

The Exagrid EX10 backup storage server is vulnerable to an XML external entities (XXE) injection in the /init API endpoint. This vulnerability affects versions before 6.4.0 P20 , 7.0.1 P12 , and 7.2.0 P08 . An authenticated, unprivileged attacker can exploit this by submitting a crafted ISys XML ...

CVE-2025-47184

An XML external entities XXE injection vulnerability in the /init API endpoint in Exagid EX10 before 6.4.0 P20, 7.0.1 P12, and 7.2.0 P08 allows an authenticated, unprivileged attacker to achieve information disclosure and privilege escalation via a crafted ISys XML message...

CVE-2025-47184: XML Injection (aka Blind XPath Injection)

An XML external entities XXE injection vulnerability in the /init API endpoint in Exagid EX10 before 6.4.0 P20, 7.0.1 P12, and 7.2.0 P08 allows an authenticated, unprivileged attacker to achieve information disclosure and privilege escalation via a crafted ISys XML message...

CVE-2025-47184

An XML external entities XXE injection vulnerability in the /init API endpoint in Exagid EX10 before 6.4.0 P20, 7.0.1 P12, and 7.2.0 P08 allows an authenticated, unprivileged attacker to achieve information disclosure and privilege escalation via a crafted ISys XML message...