EUVD-2025-12104

Malicious code in bioql PyPI...

EUVD-2025-30096

Malicious code in bioql PyPI...

EUVD-2021-28659

Malicious code in bioql PyPI...

EUVD-2025-24186

Malicious code in bioql PyPI...

EUVD-2024-21130

Malicious code in bioql PyPI...

EUVD-2024-21979

Malicious code in bioql PyPI...

EUVD-2025-15519

Malicious code in bioql PyPI...

EUVD-2025-4661

Malicious code in bioql PyPI...

EUVD-2022-47935

Malicious code in bioql PyPI...

EUVD-2022-41840

Malicious code in bioql PyPI...

EUVD-2023-46815

Malicious code in bioql PyPI...

EUVD-2024-19764

Malicious code in bioql PyPI...

EUVD-2023-34190

Malicious code in bioql PyPI...

PT-2025-40572

Name of the Vulnerable Software and Affected Versions HCL MyXalytics affected versions not specified Description The HCL MyXalytics web application is susceptible to a Cross Site Scripting issue. This allows the execution of unauthorized scripts, which could lead to unauthorized actions or access...

CVE-2025-59759 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-10659 MegaSys Enterprises Telenium Online Web Application OS Command Injection

The Telenium Online Web Application is vulnerable due to a PHP endpoint accessible to unauthenticated network users that improperly handles user-supplied input. This vulnerability occurs due to the insecure termination of a regular expression check within the endpoint. Because the input is not...

MegaSys Telenium Online Web Application 操作系统命令注入漏洞

MegaSys Telenium Online Web Application is a web management module from MegaSys, Inc. An operating system command injection vulnerability exists in MegaSys Telenium Online Web Application that originates from a PHP endpoint that does not properly validate or clean up user input, which could lead ...

CVE-2025-10136

CVE-2025-10136 concerns the WordPress plugin TweetThis Shortcode. The TweetThis Shortcode plugin is vulnerable to Stored Cross-Site Scripting via its tweetthis shortcode in all versions up to and including 1.8.0 due to insufficient input sanitization and output escaping on user-supplied attribute...

CVE-2025-41715

The database for the web application is exposed without authentication, allowing an unauthenticated remote attacker to gain unauthorized access and potentially compromise it...

CVE-2025-57145

A cross-site scripting XSS vulnerability exists in the search-autootaxi.php endpoint of the ATSMS web application. The application fails to properly sanitize user input submitted through a form field, allowing an attacker to inject arbitrary JavaScript code. The malicious payload is stored in the...