EUVD-2024-51932

Malicious code in bioql PyPI...

EUVD-2022-3247

Malicious code in bioql PyPI...

EUVD-2025-23969

Malicious code in bioql PyPI...

EUVD-2022-3581

Malicious code in bioql PyPI...

EUVD-2024-47562

Malicious code in bioql PyPI...

EUVD-2025-29743

Malicious code in bioql PyPI...

EUVD-2025-25722

Malicious code in bioql PyPI...

EUVD-2025-31382

Malicious code in bioql PyPI...

EUVD-2025-24953

Malicious code in bioql PyPI...

EUVD-2025-29922

Malicious code in bioql PyPI...

EUVD-2025-28819

Malicious code in bioql PyPI...

EUVD-2024-27029

Malicious code in bioql PyPI...

EUVD-2025-28395

Malicious code in bioql PyPI...

EUVD-2025-4385

Malicious code in bioql PyPI...

EUVD-2025-25625

Malicious code in bioql PyPI...

CVE-2025-43818

Cross-site scripting XSS vulnerability in the Calendar widget in Liferay Portal 7.4.3.35 through 7.4.3.110, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.6, 7.4 update 35 through update 92, and 7.3 update 25 through update 36 allows remote attackers to inject arbitrary we...

Liferay Portal vulnerable to cross-site scripting in the Calendar widget

Cross-site scripting XSS vulnerability in the Calendar widget in Liferay Portal 7.4.3.35 through 7.4.3.110, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.6, 7.4 update 35 through update 92, and 7.3 update 25 through update 36 allows remote attackers to inject arbitrary we...

CVE-2025-43818

Cross-site scripting XSS vulnerability in the Calendar widget in Liferay Portal 7.4.3.35 through 7.4.3.110, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.6, 7.4 update 35 through update 92, and 7.3 update 25 through update 36 allows remote attackers to inject arbitrary we...

CVE-2025-43820

A validated XSS vulnerability in the Liferay Calendar widget allows remote attackers to inject arbitrary scripts via crafted input in the user’s First Name, Middle text, or Last Name fields. Affected are Liferay Portal 7.4.3.35–7.4.3.110 and Liferay DXP 2023.Q4.0–2023.Q4.4, plus 7.3 Update 25–35 ...

CVE-2025-11070

A vulnerability was identified in Projectworlds Online Shopping System 1.0. This affects an unknown part of the file /store/cartadd.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be used...