EUVD-2024-53106

Malicious code in bioql PyPI...

EUVD-2021-8737

Malicious code in bioql PyPI...

EUVD-2025-26719

Malicious code in bioql PyPI...

EUVD-2025-32009

Malicious code in bioql PyPI...

EUVD-2024-33501

Malicious code in bioql PyPI...

EUVD-2021-9473

Malicious code in bioql PyPI...

EUVD-2021-29808

Malicious code in bioql PyPI...

EUVD-2023-43838

Malicious code in bioql PyPI...

EUVD-2025-27209

Malicious code in bioql PyPI...

EUVD-2025-23892

Malicious code in bioql PyPI...

EUVD-2023-40989

Malicious code in bioql PyPI...

EUVD-2025-31772

Malicious code in bioql PyPI...

EUVD-2022-25846

Malicious code in bioql PyPI...

CVE-2025-40647 Stored Cross-Site Scripting (XSS) vulnerability in Issabel products

Stored Cross-Site Scripting XSS vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'email' parameter in '/index.php?menu=addressbook'...

PT-2025-40025

Name of the Vulnerable Software and Affected Versions MegaSys Telenium Online Web Application affected versions not specified Description The Telenium Online Web Application contains a critical command injection flaw stemming from an insecurely terminated regular expression check within a PHP...

CVE-2025-36245 IBM InfoSphere Information Server command execution

IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input...

The vulnerability of the openvswitch component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the openvswitch component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-57981

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in catchsquare WP Social Widget allows Stored XSS. This issue affects WP Social Widget: from n/a through 2.3.1...

IBM Watsonx.data 操作系统命令注入漏洞

IBM Watsonx.data is an open data lake warehouse platform from International Business Machines IBM. An operating system command injection vulnerability exists in IBM Watsonx.data version 2.2 that stems from not properly validating user input and can be exploited by an attacker to cause a privilege...

appRain CMF cross-site scripting vulnerability (CNVD-2025-21112)

appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF, which is caused by improper validation of user input by the /apprain/developer/addons/update/ace endpoint. An attacker could use this vulnerability to steal the victim's cookie-based...