EUVD-2023-27912

Malicious code in bioql PyPI...

EUVD-2025-24197

Malicious code in bioql PyPI...

EUVD-2023-58806

Malicious code in bioql PyPI...

EUVD-2024-31827

Malicious code in bioql PyPI...

EUVD-2025-13773

Malicious code in bioql PyPI...

EUVD-2024-40818

Malicious code in bioql PyPI...

EUVD-2025-8292

Malicious code in bioql PyPI...

EUVD-2024-47113

Malicious code in bioql PyPI...

EUVD-2022-5457

Malicious code in bioql PyPI...

CVE-2025-41436

creationtimestamp| type| source ---|---|--- 2025-10-03 10:35:56+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m2bupca53c2q 2025-10-03 11:07:41+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m2bwi34cgk2c 2025-11-14 09:18:58+00:00| seen|...

CVE-2025-56379

A stored cross-site scripting XSS vulnerability in the blog post feature of ERPNEXT v15.67.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the content field...

CVE-2025-56379

A stored cross-site scripting XSS vulnerability in the blog post feature of ERPNEXT v15.67.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the content field...

CVE-2025-56379

CVE-2025-56379: A stored XSS in ERPNext v15.67.0 blog module (Frappe v15.72.4) via the blog post content field. An authenticated user who can create/edit posts can inject crafted HTML/JS; payload is stored and can execute in other users’ browsers viewing the post. Affected components: ERPNext Blo...

CVE-2025-56379

A stored cross-site scripting XSS vulnerability in the blog post feature of ERPNEXT v15.67.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the content field...

CVE-2025-56379

A stored cross-site scripting XSS vulnerability in the blog post feature of ERPNEXT v15.67.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the content field...

CVE-2025-9230

creationtimestamp| type| source ---|---|--- 2025-09-30 22:26:09+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3m23kyhzcgk2z 2025-09-30 23:41:12+00:00| seen| https://bsky.app/profile/checkmarxzero.bsky.social/post/3m23p6r2cdo2d 2025-10-01 06:25:35+00:00| seen|...

CVE-2025-8961

creationtimestamp| type| source ---|---|--- 2025-09-30 01:33:03+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lzzexup6y22u 2025-09-30 01:33:04+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lzzexviigf23 2025-09-30 07:27:35+00:00| seen|...

WordPress Query Posts plugin <= 0.3.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Query Posts versions = 0.3.2...

CVE-2025-59934

creationtimestamp| type| source ---|---|--- 2025-09-27 10:48:35+00:00| seen| https://bsky.app/profile/crowdcyber.bsky.social/post/3lzssmhc5bm2l 2025-09-27 11:25:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lzsuoqm2li2l 2025-09-28 09:16:19+00:00| published-proof-of-concept|...

CVE-2025-9984

The Featured Image from URL FIFU plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the fifuapidebugposts function in all versions up to, and including, 5.2.7. This makes it possible for unauthenticated attackers to read private/password protect...