EUVD-2023-53771

Malicious code in bioql PyPI...

EUVD-2024-45564

Malicious code in bioql PyPI...

EUVD-2024-48587

Malicious code in bioql PyPI...

EUVD-2025-32302

Malicious code in bioql PyPI...

EUVD-2025-8790

Malicious code in bioql PyPI...

EUVD-2024-0942

Malicious code in bioql PyPI...

EUVD-2025-21215

Malicious code in bioql PyPI...

EUVD-2025-25054

Malicious code in bioql PyPI...

EUVD-2022-32398

Malicious code in bioql PyPI...

EUVD-2024-46895

Malicious code in bioql PyPI...

EUVD-2023-32313

Malicious code in bioql PyPI...

EUVD-2024-50256

Malicious code in bioql PyPI...

CVE-2025-60452

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the download management module, specifically in the app\system\download\admin\downloadadmin.class.php component. The vulnerability allows attackers to upload malicious SVG...

CVE-2025-60452

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the download management module, specifically in the app\system\download\admin\downloadadmin.class.php component. The vulnerability allows attackers to upload malicious SVG...

CVE-2025-8625

The Copypress Rest API plugin for WordPress is vulnerable to Remote Code Execution via copyreaphandleimage Function in versions 1.1 to 1.2. The plugin falls back to a hard-coded JWT signing key when no secret is defined and does not restrict which file types can be fetched and saved as attachment...

PT-2025-39945

Name of the Vulnerable Software and Affected Versions Copypress Rest API plugin for WordPress versions 1.1 through 1.2 Description The Copypress Rest API plugin for WordPress is susceptible to Remote Code Execution through the copyreap handle image function. The plugin utilizes a hard-coded JWT...

PT-2025-39767

Name of the Vulnerable Software and Affected Versions Projectworlds Online Tours and Travels version 1.0 Description A security issue exists in Projectworlds Online Tours and Travels 1.0 related to unrestricted file upload. The issue is located in the /admin/change-image.php file, where...

CVE-2025-56815

Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo to save the uploaded file to a path controllable by the user, and lacks strict verification of the file name...

Exploit for CVE-2025-56815

CVE-2025-56815 Datart 1.0.0-rc.3 is vulnerable to Directory Tr...

PT-2025-39293

Name of the Vulnerable Software and Affected Versions Datart version 1.0.0-rc.3 Description The software is susceptible to a Directory Traversal issue through an unrestricted file upload. The server utilizes MultipartFile.transferTo to save uploaded files to a user-controllable path without...