EUVD-2021-34085

Malicious code in bioql PyPI...

EUVD-2025-17469

Malicious code in bioql PyPI...

EUVD-2022-5270

Malicious code in bioql PyPI...

EUVD-2025-9707

Malicious code in bioql PyPI...

EUVD-2024-22233

Malicious code in bioql PyPI...

EUVD-2024-33129

Malicious code in bioql PyPI...

EUVD-2021-32009

Malicious code in bioql PyPI...

EUVD-2022-34221

Malicious code in bioql PyPI...

EUVD-2023-12221

Malicious code in bioql PyPI...

EUVD-2024-16545

Malicious code in bioql PyPI...

EUVD-2025-17563

Malicious code in bioql PyPI...

EUVD-2025-21134

Malicious code in bioql PyPI...

EUVD-2025-25232

Malicious code in bioql PyPI...

PT-2025-40841

Name of the Vulnerable Software and Affected Versions Flowise versions prior to 3.0.5 Description The software contains a cross-site scripting issue that can be triggered when an administrator views the chat log through an IFRAME element. This could potentially lead to session hijacking and data...

CVE-2025-56515

File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript event handlers onmouseover to be uploaded...

Fiora chat group avatar is vulnerable to XSS via SVG files

File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript event handlers onmouseover to be uploaded...

CVE-2025-56515

File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript event handlers onmouseover to be uploaded...

CVE-2025-56515

File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript event handlers onmouseover to be uploaded...

CVE-2025-56515

File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript event handlers onmouseover to be uploaded...

CVE-2025-56515

The Fiora chat application (version 1.0.0) is vulnerable to Cross-Site Scripting (XSS) due to a file upload vulnerability in the user avatar functionality. The application fails to validate the content of SVG files , allowing attackers to upload and store malicious files containing elements with...