EUVD-2022-26391

Malicious code in bioql PyPI...

EUVD-2021-7786

Malicious code in bioql PyPI...

EUVD-2023-47436

Malicious code in bioql PyPI...

EUVD-2022-33145

Malicious code in bioql PyPI...

EUVD-2024-41547

Malicious code in bioql PyPI...

EUVD-2022-46820

Malicious code in bioql PyPI...

EUVD-2022-32537

Malicious code in bioql PyPI...

EUVD-2023-55114

Malicious code in bioql PyPI...

EUVD-2022-44021

Malicious code in bioql PyPI...

EUVD-2021-7895

Malicious code in bioql PyPI...

EUVD-2023-49493

Malicious code in bioql PyPI...

EUVD-2022-3127

Malicious code in bioql PyPI...

EUVD-2022-46879

Malicious code in bioql PyPI...

EUVD-2021-8716

Malicious code in bioql PyPI...

Flowise JS Injection RCE

This module exploits a remote code execution vulnerability in Flowise versions = 2.2.7-patch.1 and = 3.0.1, authentication via FLOWISEEMAIL and FLOWISEPASSWORD is required due to JWT token verification. Module Options msf use exploit/multi/http/flowise/jsrce msf undefinedjsrce show actions...

CVE-2025-58746

The Volkov Labs Business Links panel for Grafana provides an interface to navigate using external links, internal dashboards, time pickers, and dropdown menus. Prior to version 2.4.0, a malicious actor with Editor privileges can escalate their privileges to Administrator and perform arbitrary...

CVE-2025-50869

A stored Cross-Site Scripting XSS vulnerability exists in the qureydetails.php page of Institute-of-Current-Students 1.0, where the input fields for Query and Answer do not properly sanitize user input. Authenticated users can inject arbitrary JavaScript code...

CVE-2025-50869

A stored Cross-Site Scripting (XSS) vulnerability exists in the qureydetails.php page of Institute-of-Current-Students 1.0 . The root cause is the insufficient sanitization of user input within the Query and Answer input fields. This flaw allows authenticated users to inject and execute arbitrary...

PT-2025-31193

Name of the Vulnerable Software and Affected Versions Human Resource Management System version 1.0 Description Reflected Cross-Site Scripting XSS exists in Human Resource Management System version 1.0. This issue could allow an attacker to execute JavaScript code in the victim's browser by sendin...

PT-2025-28470 · Ibm · Ibm Sterling File Gateway +1

Name of the Vulnerable Software and Affected Versions: IBM Sterling B2B Integrator versions 6.0.0.0 through 6.1.2.6 IBM Sterling B2B Integrator versions 6.2.0.0 through 6.2.0.4 IBM Sterling File Gateway versions 6.0.0.0 through 6.1.2.6 IBM Sterling File Gateway versions 6.2.0.0 through 6.2.0.4...