EUVD-2025-30573

Malicious code in bioql PyPI...

EUVD-2025-31050

Malicious code in bioql PyPI...

EUVD-2025-28056

Malicious code in bioql PyPI...

EUVD-2025-24088

Malicious code in bioql PyPI...

EUVD-2022-0039

Malicious code in bioql PyPI...

EUVD-2025-30618

Malicious code in bioql PyPI...

EUVD-2025-27696

Malicious code in bioql PyPI...

EUVD-2025-30558

Malicious code in bioql PyPI...

EUVD-2025-27656

Malicious code in bioql PyPI...

EUVD-2025-30511

Malicious code in bioql PyPI...

EUVD-2025-28017

Malicious code in bioql PyPI...

EUVD-2025-30376

Malicious code in bioql PyPI...

EUVD-2025-31273

Malicious code in bioql PyPI...

EUVD-2025-30377

Malicious code in bioql PyPI...

CVE-2025-59762

CVE-2025-59762 is a reflected XSS in AndSoft e-TMS v25.03. The vulnerability stems from insufficient validation of the parameters l, demo, demo2, TNTLOGIN, UO and SuppConn in /clt/LOGINFRM_DLG.ASP, enabling an attacker to inject JavaScript via a malicious URL. Documented across NVD/CVE records an...

CVE-2025-9906 affecting package keras for versions less than 3.3.3-4

CVE-2025-9906 affecting package keras for versions less than 3.3.3-4. A patched version of the package is available...

PT-2025-43521

Name of the Vulnerable Software and Affected Versions KeeneticOS versions prior to 4.3 Description A cross site scripting XSS issue exists in KeeneticOS. This flaw, found at the "Wireless ISP" page, could allow an attacker in close proximity to the router to gain control of the device by adding n...

PT-2025-43520

Name of the Vulnerable Software and Affected Versions KeeneticOS versions prior to 4.3 Description A CRLF-injection flaw exists in KeeneticOS prior to version 4.3. This issue is present at the /auth API endpoint and could allow attackers to gain control of the device. Exploitation involves adding...

CVE-2025-9991 Tiny Bootstrap Elements Light <= 4.3.34 - Unauthenticated Local File Inclusion

The Tiny Bootstrap Elements Light plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.3.34 via the 'language' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the...

CVE-2025-11120

A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig. Executing manipulation can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the publi...