EUVD-2025-13372

Malicious code in bioql PyPI...

EUVD-2022-6298

Malicious code in bioql PyPI...

EUVD-2024-2160

Malicious code in bioql PyPI...

EUVD-2024-2165

Malicious code in bioql PyPI...

EUVD-2022-2219

Malicious code in bioql PyPI...

EUVD-2022-0732

Malicious code in bioql PyPI...

EUVD-2023-2133

Malicious code in bioql PyPI...

EUVD-2022-5309

Malicious code in bioql PyPI...

EUVD-2022-3242

Malicious code in bioql PyPI...

EUVD-2022-5718

Malicious code in bioql PyPI...

EUVD-2022-3305

Malicious code in bioql PyPI...

EUVD-2023-3012

Malicious code in bioql PyPI...

EUVD-2022-0465

Malicious code in bioql PyPI...

CVE-2024-25637

October is a self-hosted CMS platform based on the Laravel PHP Framework. The X-October-Request-Handler Header does not sanitize the AJAX handler name and allows unescaped HTML to be reflected back. There is no impact since this vulnerability cannot be exploited through normal browser interaction...

CVE-2024-25837

A stored cross-site scripting XSS vulnerability in October CMS Bloghub Plugin v1.3.8 and lower allows attackers to execute arbitrary web scripts or HTML via a crafted payload into the Comments section...

CVE-2024-24764

October is a self-hosted CMS platform based on the Laravel PHP Framework. This issue affects authenticated administrators who may be redirected to an untrusted URL using the PageFinder schema. The resolver for the page finder link schema october:// allowed external links, therefore allowing an op...

CVE-2023-44381

October is a Content Management System CMS and web platform to assist with development workflow. An authenticated backend user with the editor.cmspages, editor.cmslayouts, or editor.cmspartials permissions who would normally not be permitted to provide PHP code to be executed by the CMS due to...

CVE-2023-37692

An arbitrary file upload vulnerability in October CMS v3.4.4 allows attackers to execute arbitrary code via a crafted file...

CVE-2022-35944

October is a self-hosted Content Management System CMS platform based on the Laravel PHP Framework. This vulnerability only affects installations that rely on the safe mode restriction, commonly used when providing public access to the admin panel. Assuming an attacker has access to the admin pan...

CVE-2021-21265

October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October before version 1.1.2, when running on poorly configured servers i.e. the server routes any request, regardless of the HOST header to an October CMS instance the potential exists for Host Header...