727 matches found
EUVD-2021-30714
Malicious code in bioql PyPI...
EUVD-2023-2167
Malicious code in bioql PyPI...
EUVD-2024-32659
Malicious code in bioql PyPI...
EUVD-2022-37169
Malicious code in bioql PyPI...
EUVD-2024-0096
Malicious code in bioql PyPI...
EUVD-2022-2978
Malicious code in bioql PyPI...
EUVD-2023-0891
Malicious code in bioql PyPI...
EUVD-2024-1267
Malicious code in bioql PyPI...
EUVD-2024-49823
Malicious code in bioql PyPI...
EUVD-2022-2239
Malicious code in bioql PyPI...
EUVD-2025-32300
Malicious code in bioql PyPI...
EUVD-2022-39059
Malicious code in bioql PyPI...
EUVD-2022-27265
Malicious code in bioql PyPI...
EUVD-2025-32297
Malicious code in bioql PyPI...
EUVD-2024-40455
Malicious code in bioql PyPI...
EUVD-2022-4198
Malicious code in bioql PyPI...
CVE-2025-60453
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the column management module, specifically in the app\system\column\admin\index.class.php component. The vulnerability allows attackers to upload malicious SVG files...
CVE-2025-60448
A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists due to insufficient validation of SVG file uploads in the /admin/media.php component, allowing attackers to upload malicious SVG files containing JavaScript code that executes when th...
CVE-2025-60448
A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists due to insufficient validation of SVG file uploads in the /admin/media.php component, allowing attackers to upload malicious SVG files containing JavaScript code that executes when th...
CVE-2025-56515
CVE-2025-56515 affects Fiora chat application 1.0.0. The issue is in the user avatar SVG upload: content is not validated, allowing SVGs with foreignObject, iframe elements and JavaScript event handlers (e.g., onmouseover) to be uploaded and stored. When rendered, these SVGs execute arbitrary Jav...