EUVD-2024-48609

Malicious code in bioql PyPI...

EUVD-2024-49806

Malicious code in bioql PyPI...

EUVD-2024-50047

Malicious code in bioql PyPI...

EUVD-2021-34218

Malicious code in bioql PyPI...

EUVD-2021-34224

Malicious code in bioql PyPI...

EUVD-2025-30884

Malicious code in bioql PyPI...

EUVD-2024-19313

Malicious code in bioql PyPI...

EUVD-2024-51643

Malicious code in bioql PyPI...

EUVD-2023-26001

Malicious code in bioql PyPI...

EUVD-2025-1716

Malicious code in bioql PyPI...

EUVD-2022-41565

Malicious code in bioql PyPI...

EUVD-2024-33221

Malicious code in bioql PyPI...

EUVD-2023-43021

Malicious code in bioql PyPI...

EUVD-2025-4172

Malicious code in bioql PyPI...

CVE-2025-10302

The Ultimate Viral Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on thesaveoptions function. This makes it possible for unauthenticated attackers to update the plugin's settings...

CVE-2025-9897

CVE-2025-9897 : The WordPress AP Background plugin (versions up to 3.8.2) is affected by a Cross-Site Request Forgery due to missing/incorrect nonce validation in advParallaxBackAdminSaveSlider. Exploitation requires user interaction (social engineering via an admin action), and it can enable una...

CVE-2023-28760

TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...

PT-2025-40478

Name of the Vulnerable Software and Affected Versions Customify theme for WordPress version 0.4.11 Description The software is susceptible to Cross-Site Request Forgery due to missing or incorrect nonce validation in the reset customize section function. This allows unauthenticated attackers to...

CVE-2025-9512 Schema & Structured Data for WP & AMP < 1.50 - Unauthenticated Stored-XSS

The Schema & Structured Data for WP & AMP WordPress plugin before 1.50 does not properly handles HTML tag attribute modifications, making it possible for unauthenticated attackers to conduct Stored XSS attacks via post comments...

Splunk Cloud Platform和Splunk Enterprise 代码问题漏洞

Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. Splunk Cloud Platform and Splunk Enterprise ha...