EUVD-2022-34169

Malicious code in bioql PyPI...

EUVD-2022-39943

Malicious code in bioql PyPI...

EUVD-2022-46679

Malicious code in bioql PyPI...

EUVD-2023-28619

Malicious code in bioql PyPI...

EUVD-2023-46199

Malicious code in bioql PyPI...

EUVD-2023-30276

Malicious code in bioql PyPI...

EUVD-2023-28612

Malicious code in bioql PyPI...

EUVD-2022-28205

Malicious code in bioql PyPI...

EUVD-2023-28620

Malicious code in bioql PyPI...

EUVD-2022-28206

Malicious code in bioql PyPI...

EUVD-2023-28617

Malicious code in bioql PyPI...

EUVD-2023-28613

Malicious code in bioql PyPI...

EUVD-2022-39942

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2017-16229

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Ox gem 2.8.1 for Ruby, the process crashes with a stack-based buffer over-read in the readfromstr function in saxbuf.c when a crafted input is supplied t...

Malicious code in @zalastax/nolb-ox (npm)

The package @zalastax/nolb-ox was found to contain malicious code...

MAL-2025-12871 Malicious code in @zalastax/nolb-ox (npm)

The package @zalastax/nolb-ox was found to contain malicious code...

CVE-2023-26456

Users were able to set an arbitrary "product name" for OX Guard. The chosen value was not sufficiently sanitized before processing it at the user interface, allowing for indirect cross-site scripting attacks. Accounts that were temporarily taken over could be configured to trigger persistent code...

CVE-2023-26450

The "OX Count" web service did not specify a media-type when processing responses by external resources. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker...

CVE-2023-26449

The "OX Chat" web service did not specify a media-type when processing responses by external resources. Malicious script code can be executed within the victims context. This can lead to session hijacking or triggering unwanted actions via the web interface and API. To exploit this an attacker...

CVE-2023-29051

User-defined OXMF templates could be used to access a limited part of the internal OX App Suite Java API. The existing switch to disable the feature by default was not effective in this case. Unauthorized users could discover and modify application state, including objects related to other users...