EUVD-2022-0558

Malicious code in bioql PyPI...

EUVD-2024-28425

Malicious code in bioql PyPI...

EUVD-2025-25728

Malicious code in bioql PyPI...

EUVD-2022-52304

Malicious code in bioql PyPI...

EUVD-2025-14898

Malicious code in bioql PyPI...

EUVD-2023-31440

Malicious code in bioql PyPI...

EUVD-2023-39812

Malicious code in bioql PyPI...

EUVD-2023-0863

Malicious code in bioql PyPI...

EUVD-2024-52045

Malicious code in bioql PyPI...

EUVD-2022-6633

Malicious code in bioql PyPI...

EUVD-2024-54789

Malicious code in bioql PyPI...

EUVD-2025-7152

Malicious code in bioql PyPI...

EUVD-2023-54617

Malicious code in bioql PyPI...

QNAP Qsync Central 路径遍历漏洞

QNAP Qsync Central is a cloud-based file synchronization service on a NAS from Taiwan, China-based QNAP Technology QNAP. A path traversal vulnerability exists in QNAP Qsync Central versions prior to 5.0.0.1, which stems from a path traversal issue that could result in reading unexpected files or...

Kazaar 安全漏洞

Kazaar is a print marketing fulfillment platform from Kazaar, Inc. A security vulnerability exists in Kazaar version 1.25.12 that stems from allowing modification of the order-id parameter, which could lead to an insecure direct object reference attack...

WordPress Icegram Express Pro plugin <= 5.9.5 - Server Side Request Forgery (SSRF) vulnerability

Server Side Request Forgery SSRF vulnerability discovered by theviper17 in WordPress Plugin Icegram Express Pro versions = 5.9.5...

WordPress plugin Printeers Print & Ship 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

CVE-2025-5005

CVE-2025-5005 affects Lingdang CRM up to 8.6.5.4. The vulnerability is a server-side request forgery (SSRF) in an unknown function of the file crm/WeiXinApp/dingtalk/index_event.php, caused by manipulation of the corpurl argument. Reports indicate the attack can be launched remotely and that the ...

Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.

...

CVE-2025-9422 oitcode samarium Team Image team cross site scripting

A vulnerability was found in oitcode samarium up to 0.9.6. This impacts an unknown function of the file /dashboard/team of the component Team Image Handler. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used...