47713 matches found
WordPress WP Dispatcher plugin <= 1.2.0 - Authenticated (Subscriber+) Arbitrary File Upload vulnerability
Authenticated Subscriber+ Arbitrary File Upload vulnerability discovered by Craig Webb in WordPress Plugin WP Dispatcher versions = 1.2.0...
CVE-2025-61681 Kuno is Vulnerable to Stored XSS Attack via SVG File Upload
KUNO CMS is a fully deployable full-stack blog application. Versions 1.3.13 and below contain validation flaws in its file upload functionality that can be exploited for stored XSS. The upload endpoint only validates file types based on Content-Type headers, lacks file content analysis and...
EUVD-2025-32427
KUNO CMS is a fully deployable full-stack blog application. Versions 1.3.13 and below contain validation flaws in its file upload functionality that can be exploited for stored XSS. The upload endpoint only validates file types based on Content-Type headers, lacks file content analysis and...
EUVD-2024-34991
Malicious code in bioql PyPI...
EUVD-2025-1698
Malicious code in bioql PyPI...
EUVD-2025-8004
Malicious code in bioql PyPI...
EUVD-2023-28730
Malicious code in bioql PyPI...
EUVD-2022-44730
Malicious code in bioql PyPI...
EUVD-2023-52120
Malicious code in bioql PyPI...
EUVD-2021-30649
Malicious code in bioql PyPI...
EUVD-2022-3854
Malicious code in bioql PyPI...
EUVD-2022-29732
Malicious code in bioql PyPI...
EUVD-2025-18518
Malicious code in bioql PyPI...
EUVD-2023-52423
Malicious code in bioql PyPI...
EUVD-2023-49296
Malicious code in bioql PyPI...
EUVD-2025-7267
Malicious code in bioql PyPI...
EUVD-2024-43393
Malicious code in bioql PyPI...
EUVD-2021-30049
Malicious code in bioql PyPI...