EUVD-2025-25106

Malicious code in bioql PyPI...

EUVD-2022-53420

Malicious code in bioql PyPI...

EUVD-2021-8626

Malicious code in bioql PyPI...

EUVD-2025-29359

Malicious code in bioql PyPI...

EUVD-2025-22299

Malicious code in bioql PyPI...

EUVD-2023-36944

Malicious code in bioql PyPI...

EUVD-2023-1749

Malicious code in bioql PyPI...

EUVD-2022-38135

Malicious code in bioql PyPI...

EUVD-2025-16671

Malicious code in bioql PyPI...

EUVD-2025-6735

Malicious code in bioql PyPI...

EUVD-2025-20302

Malicious code in bioql PyPI...

EUVD-2023-32817

Malicious code in bioql PyPI...

EUVD-2022-28137

Malicious code in bioql PyPI...

EUVD-2023-35288

Malicious code in bioql PyPI...

CVE-2025-9808 The Events Calendar <= 6.15.2 - Missing Authorization to Unauthenticated Password-Protected Information Disclosure

The The Events Calendar plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 6.15.2 via the REST endpoint. This makes it possible for unauthenticated attackers to extract information about password-protected vendors or venues...

Cross-Site Scripting (XSS)

express-gateway is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper input handling in the REST Endpoint lib/rest/routes/apps.js, which allows an attacker to remotely inject and execute malicious scripts...

CVE-2025-9096

A vulnerability has been found in ExpressGateway express-gateway up to 1.16.10. Affected is an unknown function in the library lib/rest/routes/apps.js of the component REST Endpoint. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been...

WordPress AL Pack plugin unauthorized access vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. An unauthorized access vulnerability exists in the WordPress AL Pack plugin, which stems from a lack of functionality checking of the checkactivatepermission permission callback...

CVE-2025-9095

A flaw has been found in ExpressGateway express-gateway up to 1.16.10. This issue affects some unknown processing in the library lib/rest/routes/users.js of the component REST Endpoint. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

GHSA-Q4RG-7CJJ-5R86 ExpressGateway Cross-Site Scripting Vulnerability in lib/rest/routes/users.js

A cross-site scripting XSS issue exists in ExpressGateway up to 1.16.10 in the REST endpoint implemented in lib/rest/routes/users.js. User-controlled input is reflected into the HTTP response without proper sanitization, allowing arbitrary JavaScript execution in the browser of a logged-in user w...