4727 matches found
EUVD-2024-23385
Malicious code in bioql PyPI...
EUVD-2022-3968
Malicious code in bioql PyPI...
EUVD-2023-55112
Malicious code in bioql PyPI...
EUVD-2024-29064
Malicious code in bioql PyPI...
EUVD-2021-7899
Malicious code in bioql PyPI...
EUVD-2021-28447
Malicious code in bioql PyPI...
EUVD-2023-36583
Malicious code in bioql PyPI...
EUVD-2025-6839
Malicious code in bioql PyPI...
EUVD-2022-53168
Malicious code in bioql PyPI...
EUVD-2023-42181
Malicious code in bioql PyPI...
EUVD-2021-7780
Malicious code in bioql PyPI...
EUVD-2025-23403
Malicious code in bioql PyPI...
EUVD-2024-35991
Malicious code in bioql PyPI...
EUVD-2024-25881
Malicious code in bioql PyPI...
EUVD-2023-1282
Malicious code in bioql PyPI...
CVE-2025-60453
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the column management module, specifically in the app\system\column\admin\index.class.php component. The vulnerability allows attackers to upload malicious SVG files...
CVE-2025-60454
MetInfo CMS 8.0 is affected in the image management module. The XSS vulnerability arises from unvalidated SVG uploads in the file path app\system\img\admin\img_admin.class.php, enabling stored JavaScript execution when users view/access the uploaded SVG. Multiple connected sources corroborate thi...
CVE-2025-59528
Flowise 3.0.5 contains a remote code execution vulnerability in the CustomMCP node. The mcpServerConfig string is parsed and passed to the Function() constructor via convertToValidJSONString without validation, allowing an attacker to execute arbitrary JavaScript with Node.js privileges (e.g., ac...
3DAlloy 跨站脚本漏洞
3DAlloy is a lightweight 3D viewer from the individual developer Maxim Martynov. A cross-site scripting vulnerability exists in 3DAlloy 1.8 and earlier versions, which stems from not cleaning up a custom attribute on the canvas HTML element and could lead to the execution of arbitrary JavaScript...
CVE-2025-53838 LinkAce has a Stored One Click XSS vulnerability
LinkAce is a self-hosted archive to collect website links. A stored cross-site scripting XSS vulnerability was discovered in versions prior to 2.1.9 that allows an attacker to inject arbitrary JavaScript, which is then executed in the context of a user's browser when the malicious link is clicked...