EUVD-2025-5311

Malicious code in bioql PyPI...

EUVD-2024-53914

Malicious code in bioql PyPI...

EUVD-2024-53906

Malicious code in bioql PyPI...

EUVD-2024-53915

Malicious code in bioql PyPI...

EUVD-2025-16285

Malicious code in bioql PyPI...

EUVD-2022-24618

Malicious code in bioql PyPI...

EUVD-2025-9520

Malicious code in bioql PyPI...

EUVD-2025-12288

Malicious code in bioql PyPI...

EUVD-2021-7573

Malicious code in bioql PyPI...

EUVD-2024-50985

Malicious code in bioql PyPI...

EUVD-2024-34206

Malicious code in bioql PyPI...

EUVD-2024-50592

Malicious code in bioql PyPI...

EUVD-2025-2871

Malicious code in bioql PyPI...

EUVD-2023-28073

Malicious code in bioql PyPI...

CVE-2025-60991

A reflected cross-site scripted XSS vulnerability in Codazon Magento Themes v1.1.0.0 to v2.4.7 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload injected into the cat parameter...

CVE-2025-59768

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59750

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

Liferay Portal vulnerable to reflected cross-site scripting on the page configuration page

Reflected cross-site scripting XSS vulnerability on the page configuration page in Liferay Portal 7.4.3.102 through 7.4.3.110, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, and 2023.Q3.5 allows remote attackers to inject arbitrary web script or HTML via the...

CVE-2025-43815

Reflected cross-site scripting XSS vulnerability on the page configuration page in Liferay Portal 7.4.3.102 through 7.4.3.110, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, and 2023.Q3.5 allows remote attackers to inject arbitrary web script or HTML via the...

CVE-2025-43815

CVE-2025-43815 is a reflected XSS in Liferay Portal 7.4.3.102–7.4.3.110 and Liferay DXP 2023.Q4.0–2023.Q4.2 (and 2023.Q3.5) exploitable via the com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURLTitle parameter on the page configuration page. The issue allows an attacker to inject arbi...