EUVD-2024-3501

Malicious code in bioql PyPI...

EUVD-2024-52716

Malicious code in bioql PyPI...

EUVD-2025-12577

Malicious code in bioql PyPI...

EUVD-2023-2726

Malicious code in bioql PyPI...

EUVD-2023-53084

Malicious code in bioql PyPI...

EUVD-2019-6089

Malicious code in bioql PyPI...

EUVD-2023-37726

Malicious code in bioql PyPI...

EUVD-2025-32098

Malicious code in bioql PyPI...

EUVD-2024-3276

Malicious code in bioql PyPI...

EUVD-2024-47338

Malicious code in bioql PyPI...

EUVD-2023-2677

Malicious code in bioql PyPI...

EUVD-2023-30343

Malicious code in bioql PyPI...

EUVD-2025-14165

Malicious code in bioql PyPI...

CVE-2025-61597

Emlog is an open source website building system. In versions 2.5.21 and below, an HTML template injection allows stored cross‑site scripting XSS via the mail template settings. Once a malicious payload is saved, any subsequent visit to the settings page in an authenticated admin context will...

CVE-2025-61597

CVE-2025-61597 (Emlog) is a stored XSS vulnerability in Emlog 2.5.21 and earlier caused by HTML template injection in the mail template settings. In an authenticated admin session, saving a malicious payload can cause attacker‑controlled JavaScript to execute on subsequent visits to the settings ...

SUSE CVE-2025-54287

Template Injection in instance snapshot creation component in Canonical LXD = 4.0 allows an attacker with instance configuration permissions to read arbitrary files on the host system via specially crafted snapshot pattern templates using the Pongo2 template engine...

Canonical LXD Arbitrary File Read via Template Injection in Snapshot Patterns

Impact In LXD's instance snapshot creation functionality, the Pongo2 template engine is used in the snapshots.pattern configuration for generating snapshot names. While code execution functionality has not been found in this template engine, it has file reading capabilities, creating a...

GHSA-W2HG-2V4P-VMH6 Canonical LXD Arbitrary File Read via Template Injection in Snapshot Patterns

Impact In LXD's instance snapshot creation functionality, the Pongo2 template engine is used in the snapshots.pattern configuration for generating snapshot names. While code execution functionality has not been found in this template engine, it has file reading capabilities, creating a...

Exploit for Code Injection in Xwiki

XWiki SSTI Exploit A Python exploit for XWiki Server-Side Tem...

DEBIAN-CVE-2025-54287

Template Injection in instance snapshot creation component in Canonical LXD = 4.0 allows an attacker with instance configuration permissions to read arbitrary files on the host system via specially crafted snapshot pattern templates using the Pongo2 template engine...