EUVD-2021-32010

Malicious code in bioql PyPI...

EUVD-2022-37313

Malicious code in bioql PyPI...

EUVD-2022-32537

Malicious code in bioql PyPI...

EUVD-2022-44016

Malicious code in bioql PyPI...

EUVD-2021-7780

Malicious code in bioql PyPI...

EUVD-2021-7899

Malicious code in bioql PyPI...

EUVD-2022-5086

Malicious code in bioql PyPI...

EUVD-2023-0924

Malicious code in bioql PyPI...

EUVD-2025-16575

Malicious code in bioql PyPI...

EUVD-2022-6474

Malicious code in bioql PyPI...

EUVD-2024-29064

Malicious code in bioql PyPI...

EUVD-2025-5516

Malicious code in bioql PyPI...

EUVD-2025-5510

Malicious code in bioql PyPI...

EUVD-2024-35991

Malicious code in bioql PyPI...

EUVD-2021-7911

Malicious code in bioql PyPI...

CVE-2025-60453

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the column management module, specifically in the app\system\column\admin\index.class.php component. The vulnerability allows attackers to upload malicious SVG files...

CVE-2025-60454

A stored Cross-Site Scripting (XSS) vulnerability exists in MetInfo CMS version 8.0 within the image management module. The flaw is located specifically in the `app system img admin img_admin.class.php` component due to unvalidated SVG file input . Attackers can upload malicious SVG files contain...

CVE-2025-59773: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-57873: Improper Neutralization of Input During Web Page Generation

There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote authenticated attacker with administrative access to supply a crafted string which would execute arbitrary JavaScript code in the browser...

CVE-2025-57877: Improper Neutralization of Input During Web Page Generation

There is a reflected cross site scripting vulnerability in Esri Portal for ArcGIS 11.4 and below that may allow a remote authenticated attacker with administrative access to supply a crafted string which would execute arbitrary JavaScript code in the browser...