EUVD-2024-1747

Malicious code in bioql PyPI...

EUVD-2025-22945

Malicious code in bioql PyPI...

EUVD-2022-24774

Malicious code in bioql PyPI...

EUVD-2025-18797

Malicious code in bioql PyPI...

EUVD-2022-6607

Malicious code in bioql PyPI...

EUVD-2022-3865

Malicious code in bioql PyPI...

EUVD-2023-34258

Malicious code in bioql PyPI...

EUVD-2025-11089

Malicious code in bioql PyPI...

EUVD-2022-7579

Malicious code in bioql PyPI...

EUVD-2024-0097

Malicious code in bioql PyPI...

EUVD-2023-35069

Malicious code in bioql PyPI...

EUVD-2024-2834

Malicious code in bioql PyPI...

EUVD-2025-24766

Malicious code in bioql PyPI...

EUVD-2025-17112

Malicious code in bioql PyPI...

EUVD-2023-0480

Malicious code in bioql PyPI...

CVE-2025-59525

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, improper sanitization across the application allows XSS via uploaded SVG and via allowed , which can be chained to execute JavaScript whenever users view impacted content e.g., announcements. This can...

CVE-2025-55888

Cross-Site Scripting XSS vulnerability was discovered in the Ajax transaction manager endpoint of ARD. An attacker can intercept the Ajax response and inject malicious JavaScript into the accountName field. This input is not properly sanitized or encoded when rendered, allowing script execution i...

Path Traversal

github.com/mattermost/mattermost-server is vulnerable to Path Traversal. The vulnerability is due to improper sanitization of path traversal sequences in template file destination paths, which allows an attacker system admin to perform path traversal attacks and place malicious files outside...

Path Traversal

github.com/mattermost/mattermost-server is vulnerable to path traversal. The vulnerability is due to improper sanitization of file names, which allows an attacker with file upload permissions to overwrite file attachment thumbnails via file streaming APIs...

Cross-site Scripting (XSS)

Liferay Portal is vulnerable to Cross-site Scripting XSS. The vulnerability is due to insufficient input sanitization due to improper handling of the comliferayusersadminwebportletUsersAdminPortletassetTagNames parameter, allowing remote authenticated attackers to inject JavaScript...