EUVD-2024-27420

Malicious code in bioql PyPI...

EUVD-2024-32226

Malicious code in bioql PyPI...

EUVD-2023-59084

Malicious code in bioql PyPI...

EUVD-2024-17052

Malicious code in bioql PyPI...

EUVD-2025-18659

Malicious code in bioql PyPI...

EUVD-2023-57873

Malicious code in bioql PyPI...

EUVD-2024-44238

Malicious code in bioql PyPI...

EUVD-2024-17677

Malicious code in bioql PyPI...

EUVD-2024-46303

Malicious code in bioql PyPI...

EUVD-2023-12450

Malicious code in bioql PyPI...

EUVD-2024-46295

Malicious code in bioql PyPI...

EUVD-2024-32996

Malicious code in bioql PyPI...

EUVD-2024-54152

Malicious code in bioql PyPI...

EUVD-2023-59012

Malicious code in bioql PyPI...

EUVD-2025-29165

Malicious code in bioql PyPI...

CVE-2025-57906

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in epeken Epeken All Kurir epeken-all-kurir allows Stored XSS.This issue affects Epeken All Kurir: from n/a through = 2.0.6...

CVE-2025-10458

CVE-2025-10458 affects Zephyr Project RTOS Bluetooth; the issue is that the Bluetooth LE connection response (le_conn_rsp) does not sanitize/validate CID, MTU, and MPS values, which are used in internal operations. Public sources describe that improper handling of these parameters can enable info...

CVE-2025-57145

A cross-site scripting XSS vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application. The application fails to properly sanitize user input submitted through a form field, allowing an attacker to inject arbitrary JavaScript code. The malicious payload is stored in the...

Cross-site Scripting (XSS)

Liferay Portal is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper input validation due to failure to sanitize user-supplied input in the googlegadget component, allowing remote attackers to inject malicious JavaScript...

CVE-2025-51968

The CVE-2025-51968 entry concerns PuneethReddyHC Online Shopping System Advanced 1.0, where the SQL Injection vulnerability arises in the action.php file due to unsanitized input in the proId POST parameter. The impact described is that attackers can inject arbitrary SQL expressions. No exploitat...