EUVD-2024-0053

Malicious code in bioql PyPI...

EUVD-2023-49329

Malicious code in bioql PyPI...

EUVD-2025-26548

Malicious code in bioql PyPI...

EUVD-2025-32232

Malicious code in bioql PyPI...

EUVD-2025-13849

Malicious code in bioql PyPI...

CVE-2025-11223

Installer of Panasonic AutoDownloader version 1.2.8 contains an issue with the DLL search path, which may lead to loading a crafted DLL file in the same directory...

Panasonic AutoDownloader 安全漏洞

Panasonic AutoDownloader is an automatic update utility software from Panasonic Corporation Japan. A security vulnerability exists in Panasonic AutoDownloader version 1.2.8, which stems from a DLL search path issue that could lead to loading of specially crafted DLL files...

PT-2025-40463

Name of the Vulnerable Software and Affected Versions Panasonic AutoDownloader version 1.2.8 Description The installer for Panasonic AutoDownloader version 1.2.8 has an issue with the Dynamic Link Library DLL search path. This could allow a malicious actor to load a crafted DLL file located in th...

WordPress Rethink Theme <= 1.2.8 - Sensitive Data Exposure Vulnerability

Sensitive Data Exposure Vulnerability discovered by Legion Hunter in WordPress Theme Rethink versions = 1.2.8...

WordPress Healthy Blog Theme <= 1.2.8 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Healthy Blog versions = 1.2.8...

CVE-2025-58618

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jonathan Jernigan Pie Calendar pie-calendar allows DOM-Based XSS.This issue affects Pie Calendar: from n/a through = 1.2.8...

CVE-2025-58618

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jonathan Jernigan Pie Calendar pie-calendar allows DOM-Based XSS.This issue affects Pie Calendar: from n/a through = 1.2.8...

CVE-2025-58618 WordPress Pie Calendar Plugin <= 1.2.8 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jonathan Jernigan Pie Calendar pie-calendar allows DOM-Based XSS.This issue affects Pie Calendar: from n/a through = 1.2.8...

CVE-2025-58618

CVE-2025-58618 affects the WordPress Pie Calendar plugin up to version 1.2.8. The vulnerability is a DOM-based XSS due to improper input neutralization during web page generation. Impact is described as a cross-site scripting risk within Pie Calendar’s calendar rendering, potentially enabling inj...

WordPress plugin Pie Calendar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2025-35752

Name of the Vulnerable Software and Affected Versions: Pie Calendar versions through 1.2.8 Description: Pie Calendar is susceptible to a DOM-Based Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Update Pie Calendar to a version...

Malicious code in monolith-twirp-notifications-notifyd (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 839538184262ac542c8ff20a2f5c8e1de29137acee4cf16ae1310f8856960426 The OpenSSF Package Analysis project identified 'monolith-twirp-notifications-notifyd' @ 1.2.8 rubygems as malicious. It is considered malicious...

CVE-2025-9579

A weakness has been identified in LB-LINK BL-X26 1.2.8. The impacted element is an unknown function of the file /goform/sethidessidcfg of the component HTTP Handler. This manipulation of the argument enable causes os command injection. The attack can be initiated remotely. The exploit has been ma...

CVE-2025-9580

A security vulnerability has been detected in LB-LINK BL-X26 1.2.8. This affects an unknown function of the file /goform/setblacklist of the component HTTP Handler. Such manipulation of the argument mac leads to os command injection. The attack can be launched remotely. The exploit has been...

CVE-2025-9580 LB-LINK BL-X26 HTTP set_blacklist os command injection

A security vulnerability has been detected in LB-LINK BL-X26 1.2.8. This affects an unknown function of the file /goform/setblacklist of the component HTTP Handler. Such manipulation of the argument mac leads to os command injection. The attack can be launched remotely. The exploit has been...