232 matches found
EUVD-2018-11466
Malware in sbrugna...
EUVD-2025-31651
Malicious code in bioql PyPI...
EUVD-2025-16906
Malicious code in bioql PyPI...
EUVD-2025-16933
Malicious code in bioql PyPI...
EUVD-2025-31622
Malicious code in bioql PyPI...
EUVD-2023-26629
Malicious code in bioql PyPI...
EUVD-2025-31662
Malicious code in bioql PyPI...
EUVD-2025-16930
Malicious code in bioql PyPI...
EUVD-2025-16907
Malicious code in bioql PyPI...
EUVD-2025-31652
Malicious code in bioql PyPI...
EUVD-2025-31655
Malicious code in bioql PyPI...
EUVD-2022-28550
Malicious code in bioql PyPI...
EUVD-2025-16932
Malicious code in bioql PyPI...
EUVD-2025-23380
Malicious code in bioql PyPI...
EUVD-2025-16931
Malicious code in bioql PyPI...
EUVD-2025-31663
Malicious code in bioql PyPI...
CVE-2025-61586
FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below are vulnerable to directory enumeration by setting path in theme field, allowing attackers to gain additional information about the server by checking if certain directories exist. This issue is fixed in version 1.27.0...
CVE-2025-59950
FreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.3 and below, due to a bypass of double clickjacking protection confirmation dialog, it is possible to trick the admin into clicking the Promote button in another user's management page after the admin double clicks on a button...
CVE-2025-59948
FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not sanitize certain event handler attributes in feed content, so by finding a page that renders feed entries without CSP, it is possible to execute an XSS payload. The Allow API access authentication setting needs to ...
CVE-2025-57769
FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below contain a vulnerability where a specially crafted page can trick a user into executing arbitrary JS code or promoting a user in FreshRSS by obscuring UI elements in iframes. If embedding an authenticated iframe is possibl...