EUVD-2022-52925

Malicious code in bioql PyPI...

EUVD-2023-42207

Malicious code in bioql PyPI...

EUVD-2023-58116

Malicious code in bioql PyPI...

EUVD-2022-52924

Malicious code in bioql PyPI...

EUVD-2021-8982

Malicious code in bioql PyPI...

EUVD-2023-29040

Malicious code in bioql PyPI...

EUVD-2024-21368

Malicious code in bioql PyPI...

EUVD-2021-9000

Malicious code in bioql PyPI...

EUVD-2023-53933

Malicious code in bioql PyPI...

EUVD-2025-13670

Malicious code in bioql PyPI...

EUVD-2023-46781

Malicious code in bioql PyPI...

XSS-CTF

XSS-CTF Contains hands-on XSS test cases from beginner...

CVE-2025-58233

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Guaven Labs SQL Chart Builder sql-chart-builder allows DOM-Based XSS.This issue affects SQL Chart Builder: from n/a through = 2.3.7.2...

ThinkPad Elliptic Labs Virtual Lock Sensor Privilege Escalation

The vulnerability of the Elliptic Labs Virtual Lock Sensor microprogramming software in ThinkPad laptops is related to incorrect permissions. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2025-58233

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Guaven Labs SQL Chart Builder sql-chart-builder allows DOM-Based XSS.This issue affects SQL Chart Builder: from n/a through = 2.3.7.2...

PT-2025-38898

Name of the Vulnerable Software and Affected Versions Guaven Labs SQL Chart Builder versions through 2.3.7.2 Description A flaw exists in Guaven Labs SQL Chart Builder that allows for DOM-Based Cross-site Scripting XSS. This issue is due to improper neutralization of input during web page...

WordPress plugin Guaven Labs SQL Chart Builder 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plug-in. A cross-site scriptin...

CVE-2025-58233: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Guaven Labs SQL Chart Builder sql-chart-builder allows DOM-Based XSS.This issue affects SQL Chart Builder: from n/a through = 2.3.7.2...

cs253.stanford.edu

It is an offensive tool for web application security education. The repository contains a collection of assignments and exercises for the CS 253 Web Security course at Stanford University. The assignments are designed to educate students on various web security topics, including client-side...

JustTryHarder

This is a cheat sheet repository for the PWK Pentester's Workbench course and the OSCP Offensive Security Certified Professional exam. It is inspired by PayloadAllTheThings. The repository contains various tools, scripts, and resources for penetration testing and exploitation. The repository...