EUVD-2025-12157

Malicious code in bioql PyPI...

EUVD-2025-12161

Malicious code in bioql PyPI...

EUVD-2025-8639

Malicious code in bioql PyPI...

EUVD-2025-23366

Malicious code in bioql PyPI...

EUVD-2024-32917

Malicious code in bioql PyPI...

EUVD-2025-29619

Malicious code in bioql PyPI...

EUVD-2024-30286

Malicious code in bioql PyPI...

EUVD-2023-23999

Malicious code in bioql PyPI...

EUVD-2024-49754

Malicious code in bioql PyPI...

EUVD-2025-14316

Malicious code in bioql PyPI...

EUVD-2024-49262

Malicious code in bioql PyPI...

CVE-2025-10940 Total.js CMS Layout admin layouts_save cross site scripting

A vulnerability was found in Total.js CMS 1.0.0. Affected by this vulnerability is the function layoutssave of the file /admin/ of the component Layout Page. Performing manipulation of the argument HTML results in cross site scripting. It is possible to initiate the attack remotely. The exploit h...

CVE-2025-8276

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Patika Global Technologies HumanSuite allows...

CVE-2025-8276

Patika Global Technologies HumanSuite versions prior to 53.21.0 are vulnerable to multiple injection flaws, including Improper Neutralization of Input During Web Page Generation , Improper Encoding or Escaping of Output , and Improper Neutralization of Special Elements in Output . These vulnerabi...

CVE-2025-8276 HTML Injection in Patika Global Technologies' HumanSuite

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Patika Global Technologies HumanSuite allows...

CVE-2025-10117

A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetchtasks.php of the component Add New Task. Executing manipulation with the input alert'XSS' can lead to cross site scripting. The attack can be executed remotely. The...

CVE-2025-9845

A vulnerability has been found in code-projects Fruit Shop Management System 1.0. Affected by this vulnerability is an unknown functionality of the file products.php. Such manipulation of the argument productcode/genname/productname/supplier leads to cross site scripting. It is possible to launch...

CVE-2025-9940

CodeAstro Real Estate Management System 1.0 contains a cross-site scripting (XSS) vulnerability in the /feature.php file, caused by manipulation of the msg parameter. The issue can be triggered remotely and exploits are publicly available. Multiple sources (NVD, CVE listing, Red Hat, CNVD, PT Sec...

CVE-2025-9767

A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /Admin/sporttype.php. Executing manipulation of the argument code can lead to sql injection. The attack can be executed remotely. The exploit has been publicly disclosed and m...

CVE-2025-9845

The CVE-2025-9845 entry applies to Code-Projects Fruit Shop Management System 1.0. What’s vulnerable: the products.php file’s handling of the arguments product_code, gen_name, product_name, and supplier. Root cause: input parameter manipulation leads to cross-site scripting (XSS). Impact: remote ...