EUVD-2023-51441

Malicious code in bioql PyPI...

EUVD-2023-49583

Malicious code in bioql PyPI...

EUVD-2023-27793

Malicious code in bioql PyPI...

EUVD-2022-48058

Malicious code in bioql PyPI...

EUVD-2023-36003

Malicious code in bioql PyPI...

EUVD-2023-38896

Malicious code in bioql PyPI...

CVE-2025-11147

CVE-2025-11147: Reflected XSS in Apt-Cacher-NG 3.2.1. The vulnerability allows script execution in /html/.html. Affected product is Apt-Cacher-NG; root cause is reflected XSS, with multiple sources noting no information on a vendor patch in some advisories, and others indicating patch status vari...

N8N's Chat Trigger component is vulnerable to XSS

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file...

CVE-2025-56265

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file...

CVE-2025-56265: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file...

CVE-2025-56265

The n8n platform (specifically versions v1.95.3 , v1.100.1 , and v1.101.1 ) is vulnerable to arbitrary file upload within the Chat Trigger component. This issue is caused by improper validation and handling of uploaded files, which allows an attacker to upload a crafted HTML file to execute arbit...

CVE-2025-9800

A weakness has been identified in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. Affected by this issue is the function Import of the file apps/sim/app/api/files/upload/route.ts of the component HTML File Parser. Executing manipulation of the argument File can lead to unrestricte...

CVE-2025-9800

The CVE-2025-9800 entry corresponds to SimStudioAI, where the vulnerability resides in the Import function of the file apps/sim/app/api/files/upload/route.ts within the HTML File Parser component. The root cause is manipulation of the File argument, leading to unrestricted file upload and potenti...

CVE-2025-9800 SimStudioAI sim HTML File route.ts import unrestricted upload

A weakness has been identified in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. Affected by this issue is the function Import of the file apps/sim/app/api/files/upload/route.ts of the component HTML File Parser. Executing manipulation of the argument File can lead to unrestricte...

CVE-2025-9800: Unrestricted Upload of File with Dangerous Type

A weakness has been identified in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. Affected by this issue is the function Import of the file apps/sim/app/api/files/upload/route.ts of the component HTML File Parser. Executing manipulation of the argument File can lead to unrestricte...

CVE-2025-56236

FormCms v0.5.5 contains a stored cross-site scripting XSS vulnerability in the avatar upload feature. Authenticated users can upload .html files containing malicious JavaScript, which are accessible via a public URL. When a privileged user accesses the file, the script executes in their browser...

CVE-2010-10015 AOL <= 9.5 Phobos.Playlist 'Import()' Stack-Based Buffer Overflow

AOL versions up to and including 9.5 includes an ActiveX control Phobos.dll that exposes a method called Import via the Phobos.Playlist COM object. This method is vulnerable to a stack-based buffer overflow when provided with an excessively long string argument. Exploitation allows remote attacke...

CVE-2010-10015

CVE-2010-10015 affects AOL software up to version 9.5, where Phobos.dll exposes Import() via Phobos.Playlist and suffers a stack-based buffer overflow on long string arguments. Exploitation requires a locally opened malicious HTML file, allowing code execution in the user context. The vulnerabili...

WeGIA SQL Injection Vulnerability

WeGIA is a web manager for welfare organizations. WeGIA suffers from an SQL injection vulnerability that originates from the unvalidated parameter idatendido in file /html/atendido/ProfileAtendido.php, which can be exploited by an attacker to execute illegal SQL commands to steal sensitive databa...

CVE-2025-4392: Improper Neutralization of Input During Web Page Generation

The Shared Files – Frontend File Upload Form & Secure File Sharing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via html File uploads in all versions up to, and including, 1.7.48 due to insufficient input sanitization and output escaping within the sanitizefile function. This...