1908 matches found
EUVD-2025-24650
Malicious code in bioql PyPI...
EUVD-2025-25455
Malicious code in bioql PyPI...
EUVD-2023-41055
Malicious code in bioql PyPI...
EUVD-2025-21215
Malicious code in bioql PyPI...
EUVD-2024-26440
Malicious code in bioql PyPI...
EUVD-2024-33598
Malicious code in bioql PyPI...
EUVD-2024-17239
Malicious code in bioql PyPI...
EUVD-2022-33010
Malicious code in bioql PyPI...
EUVD-2023-53770
Malicious code in bioql PyPI...
EUVD-2023-57380
Malicious code in bioql PyPI...
EUVD-2025-25054
Malicious code in bioql PyPI...
EUVD-2022-5538
Malicious code in bioql PyPI...
EUVD-2025-31459
Malicious code in bioql PyPI...
CVE-2025-60452
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the download management module, specifically in the app\system\download\admin\downloadadmin.class.php component. The vulnerability allows attackers to upload malicious SVG...
CVE-2025-60452
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the download management module, specifically in the app\system\download\admin\downloadadmin.class.php component. The vulnerability allows attackers to upload malicious SVG...
CVE-2025-8625
The Copypress Rest API plugin for WordPress is vulnerable to Remote Code Execution via copyreaphandleimage Function in versions 1.1 to 1.2. The plugin falls back to a hard-coded JWT signing key when no secret is defined and does not restrict which file types can be fetched and saved as attachment...
PT-2025-39945
Name of the Vulnerable Software and Affected Versions Copypress Rest API plugin for WordPress versions 1.1 through 1.2 Description The Copypress Rest API plugin for WordPress is susceptible to Remote Code Execution through the copyreap handle image function. The plugin utilizes a hard-coded JWT...
PT-2025-39767
Name of the Vulnerable Software and Affected Versions Projectworlds Online Tours and Travels version 1.0 Description A security issue exists in Projectworlds Online Tours and Travels 1.0 related to unrestricted file upload. The issue is located in the /admin/change-image.php file, where...
CVE-2025-56815
Datart 1.0.0-rc.3 is vulnerable to Directory Traversal in the POST /viz/image interface, since the server directly uses MultipartFile.transferTo to save the uploaded file to a path controllable by the user, and lacks strict verification of the file name...
