EUVD-2024-2008

Malicious code in bioql PyPI...

EUVD-2024-45541

Malicious code in bioql PyPI...

EUVD-2025-25289

Malicious code in bioql PyPI...

EUVD-2025-28061

Malicious code in bioql PyPI...

EUVD-2025-28161

Malicious code in bioql PyPI...

EUVD-2025-28502

Malicious code in bioql PyPI...

EUVD-2025-27266

Malicious code in bioql PyPI...

EUVD-2025-25617

Malicious code in bioql PyPI...

EUVD-2025-25040

Malicious code in bioql PyPI...

CVE-2025-0876

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Isin Basi Advertisement Information Technologies Trade Inc. IT's Workif allows Cross-Site Scripting XSS. This issue affects IT's Workif: through 20251003. NOTE: The vendor was contacted earl...

PT-2025-40511

Name of the Vulnerable Software and Affected Versions IT's Workif versions through 20251003 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, potentially leading to Cross-Site Scripting XSS. This could allow an attacker to inject...

Security Bulletin: IBM Watson Studio on Cloud Pak for Data is vulnerable to a cross-site scripting vulnerability

Summary Watson Studio on Cloud Pak for Data is vulnerable to cross-site scripting within the Web UI CVE-2025-33116 Vulnerability Details CVEID:CVE-2025-33116 DESCRIPTION: IBM Cloud Pak for Data is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitra...

Improper Check or Handling of Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions in the /api/webhook endpoint. An attacker can cause the server to crash and disrupt service availability by sending a Bitbucket Server Push event with JSON field repository.links.clon...

PT-2025-40003

Name of the Vulnerable Software and Affected Versions Versions prior to 2025-54476 Description Improper handling of input can result in a cross-site scripting XSS vector within the checkAttribute method of the input filter framework class. Recommendations At the moment, there is no information...

CVE-2025-6396

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Webbeyaz Website Design Website Software allows Cross-Site Scripting XSS.This issue affects Website Software: through 2025.07.14...

CVE-2025-6396

CVE-2025-6396 affects Webbeyaz Website Design Website Software (versions through 2025.07.14). The root cause is improper neutralization of input during web page generation, leading to cross-site scripting (XSS). The CVSS–3.1 vector indicates NETWORK access, LOW attack complexity, no privileges re...

CVE-2025-60124

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryan Hellyer Simple Colorbox simple-colorbox allows Stored XSS.This issue affects Simple Colorbox: from n/a through = 1.6.1...

CVE-2025-60144 WordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Stored XSS.This issue affects Lenix scss compiler: from n/a through = 1.2...

PT-2025-39589

Name of the Vulnerable Software and Affected Versions Amit Verma Map Categories to Pages versions through 1.3.2 Description The software contains a flaw due to improper handling of user-supplied data during web page creation, leading to a potential Cross-site Scripting XSS issue. This specific...

PT-2025-39596

Name of the Vulnerable Software and Affected Versions Jennifer Moss MWW Disclaimer Buttons versions through 3.41 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means that malicious code...