EUVD-2020-3191

Malware in sbrugna...

EUVD-2025-23859

Malicious code in bioql PyPI...

EUVD-2024-1112

Malicious code in bioql PyPI...

EUVD-2023-3309

Malicious code in bioql PyPI...

EUVD-2024-18191

Malicious code in bioql PyPI...

EUVD-2025-26118

Malicious code in bioql PyPI...

EUVD-2023-36212

Malicious code in bioql PyPI...

EUVD-2022-4309

Malicious code in bioql PyPI...

EUVD-2024-18252

Malicious code in bioql PyPI...

EUVD-2022-24351

Malicious code in bioql PyPI...

EUVD-2024-0075

Malicious code in bioql PyPI...

EUVD-2024-3570

Malicious code in bioql PyPI...

EUVD-2025-7671

Malicious code in bioql PyPI...

EUVD-2022-40931

Malicious code in bioql PyPI...

CVE-2024-58260

A vulnerability has been identified within Rancher Manager where a missing server-side validation on the .username field in Rancher can allow users with update permissions on other User resources to cause denial of access for targeted accounts...

CVE-2024-58260 Rancher update on users can deny the service to the admin

A vulnerability has been identified within Rancher Manager where a missing server-side validation on the .username field in Rancher can allow users with update permissions on other User resources to cause denial of access for targeted accounts...

CVE-2025-8118

PAD CMS implements weak client-side brute-force protection by utilizing two cookies: logincount and logintimeout. Information about attempt count or timeout is not stored on the server, which allows a malicious attacker to bypass this brute-force protection by resetting those cookies. This issue...

CVE-2025-59524

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, the file upload flow performs validation only in the browser and does not enforce server-side checks. An attacker can bypass the client-side validation for example, with an intercepting proxy or by...

CVE-2025-59524 Horilla Stored XSS Vulnerability via File Upload in Reimbursement Panel

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, the file upload flow performs validation only in the browser and does not enforce server-side checks. An attacker can bypass the client-side validation for example, with an intercepting proxy or by...

CVE-2025-8942

The WP Hotel Booking WordPress plugin before 2.2.3 lacks proper server-side validation for review ratings, allowing an attacker to manipulate the rating value e.g., sending negative or out-of-range values by intercepting and modifying requests...