EUVD-2022-40725

Malicious code in bioql PyPI...

EUVD-2025-29533

Malicious code in bioql PyPI...

EUVD-2025-28350

Malicious code in bioql PyPI...

EUVD-2023-46238

Malicious code in bioql PyPI...

EUVD-2022-53059

Malicious code in bioql PyPI...

EUVD-2025-28061

Malicious code in bioql PyPI...

EUVD-2024-45541

Malicious code in bioql PyPI...

EUVD-2025-8395

Malicious code in bioql PyPI...

EUVD-2023-25303

Malicious code in bioql PyPI...

EUVD-2022-25705

Malicious code in bioql PyPI...

EUVD-2025-28647

Malicious code in bioql PyPI...

EUVD-2024-31375

Malicious code in bioql PyPI...

EUVD-2025-24383

Malicious code in bioql PyPI...

EUVD-2025-8408

Malicious code in bioql PyPI...

CVE-2025-0876

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Isin Basi Advertisement Information Technologies Trade Inc. IT's Workif allows Cross-Site Scripting XSS. This issue affects IT's Workif: through 20251003. NOTE: The vendor was contacted earl...

CVE-2025-0876

The CVE-2025-0876 entry describes an XSS vulnerability in IT’s Workif (Isin Basi Advertisement Information Technologies Trade Inc.). The root cause is improper input neutralization during web page generation, affecting Workif versions through 20251003. CVSS 3.1 base score 4.1 (Medium) with networ...

PT-2025-40511

Name of the Vulnerable Software and Affected Versions IT's Workif versions through 20251003 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, potentially leading to Cross-Site Scripting XSS. This could allow an attacker to inject...

Workif 跨站脚本漏洞

Workif is a customer tracking management software from Workif Turkey. A cross-site scripting vulnerability exists in Workif 20251003 and earlier versions, which stems from improper input neutralization and could lead to cross-site scripting attacks...

Security Bulletin: IBM Watson Studio on Cloud Pak for Data is vulnerable to a cross-site scripting vulnerability

Summary Watson Studio on Cloud Pak for Data is vulnerable to cross-site scripting within the Web UI CVE-2025-33116 Vulnerability Details CVEID:CVE-2025-33116 DESCRIPTION: IBM Cloud Pak for Data is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitra...

BIT-GITLAB-2025-9642 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could allow an attacker to inject malicious content that may lead to account takeover...