655 matches found
EUVD-2023-33091
Malicious code in bioql PyPI...
EUVD-2021-7862
Malicious code in bioql PyPI...
EUVD-2025-20212
Malicious code in bioql PyPI...
EUVD-2021-32531
Malicious code in bioql PyPI...
EUVD-2025-15601
Malicious code in bioql PyPI...
EUVD-2021-28266
Malicious code in bioql PyPI...
EUVD-2022-26821
Malicious code in bioql PyPI...
EUVD-2023-34060
Malicious code in bioql PyPI...
EUVD-2023-37452
Malicious code in bioql PyPI...
EUVD-2023-1330
Malicious code in bioql PyPI...
EUVD-2022-4840
Malicious code in bioql PyPI...
EUVD-2021-7977
Malicious code in bioql PyPI...
EUVD-2025-8778
Malicious code in bioql PyPI...
EUVD-2022-37273
Malicious code in bioql PyPI...
PT-2025-39033
Name of the Vulnerable Software and Affected Versions Mesh Connect JS SDK versions prior to 3.3.2 Description Mesh Connect JS SDK contains JS libraries for integrating with Mesh Connect. A lack of sanitization of URLs protocols in the createLink.openLink function enables the execution of arbitrar...
📄 Node.JS 4.1.1 Directory Listing
Node.JS versions 4.1.1 and below suffer from a Range header issue that results in a directory listing. !/bin/bash Exploit Title: Node.JS -u \n" exit else echo -e "\n+ TARGET: $TARGET$URI\n" curl -s -H "Range: 99999" $TARGET$URI | html2text | sed '1d;$d' fi...
Flowise has Remote Code Execution vulnerability
Description Cause of the Vulnerability The CustomMCP node allows users to input configuration settings for connecting to an external MCP Model Context Protocol server. This node parses the user-provided mcpServerConfig string to build the MCP server configuration. However, during this process, it...
PT-2025-36170
Name of the Vulnerable Software and Affected Versions: Parallax Scrolling Enllax.js versions through 0.0.6 Description: A Cross-Site Request Forgery CSRF issue exists in Parallax Scrolling Enllax.js, potentially allowing attackers to perform actions on behalf of authenticated users...
CVE-2025-55033
Dragging JavaScript links to the URL bar in Focus for iOS could be utilized to run malicious scripts, potentially resulting in XSS attacks. This vulnerability was fixed in Focus for iOS 142...
Linux Distros Unpatched Vulnerability : CVE-2020-7676
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping elements in...