EUVD-2022-35240

Malicious code in bioql PyPI...

EUVD-2023-1876

Malicious code in bioql PyPI...

EUVD-2024-53531

Malicious code in bioql PyPI...

EUVD-2023-43409

Malicious code in bioql PyPI...

EUVD-2022-6013

Malicious code in bioql PyPI...

EUVD-2025-25182

Malicious code in bioql PyPI...

EUVD-2022-43544

Malicious code in bioql PyPI...

EUVD-2025-24623

Malicious code in bioql PyPI...

EUVD-2021-32178

Malicious code in bioql PyPI...

EUVD-2025-12265

Malicious code in bioql PyPI...

EUVD-2023-52910

Malicious code in bioql PyPI...

EUVD-2025-32189

Malicious code in bioql PyPI...

WordPress plugin AP Background 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. WordPress AP Background plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of advparallaxback,...

Cross-site Scripting (XSS)

Overview behavex is an Agile testing framework on top of Behave BDD. Affected versions of this package are vulnerable to Cross-site Scripting XSS via when rendering step.text in the HTML report template. An attacker can inject arbitrary HTML or JavaScript in the context of a user's browser by...

CVE-2025-57393

A stored cross-site scripting XSS in Kissflow Work Platform Kissflow Application Versions 7337 Account v2.0 to v4.2vallows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

CVE-2025-60991

A reflected cross-site scripted XSS vulnerability in Codazon Magento Themes v1.1.0.0 to v2.4.7 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload injected into the cat parameter...

IBM Planning Analytics Local 跨站脚本漏洞

IBM Planning Analytics Local is a web-based local architecture from International Business Machines IBM. IBM Planning Analytics Local suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be...

WordPress plugin Any News Ticker 跨站脚本漏洞

WordPress Any News Ticker plugin is a functional plugin for adding dynamic scrolling news tickers to your website. WordPress Any News Ticker plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of any-ticker, which can...

Rems Employee Management System 安全漏洞

Rems Employee Management System is an employee management system from Rems, Inc. A security vulnerability exists in Rems Employee Management System version 1.0, which originates from the injection of a malicious payload into the department name field and could lead to a clickjacking attack...

JNDIExploit

This is a Java-based exploit tool for JNDI Java Naming and Directory Interface injection vulnerabilities. The tool is designed to inject a payload into the JNDI repository, allowing an attacker to execute arbitrary code on the target system. The tool is based on the Rogue JNDI project and support...