EUVD-2023-2883

Malicious code in bioql PyPI...

EUVD-2022-5105

Malicious code in bioql PyPI...

EUVD-2025-28137

Malicious code in bioql PyPI...

EUVD-2023-38201

Malicious code in bioql PyPI...

EUVD-2025-26374

Malicious code in bioql PyPI...

EUVD-2023-3317

Malicious code in bioql PyPI...

EUVD-2025-13907

Malicious code in bioql PyPI...

EUVD-2025-3999

Malicious code in bioql PyPI...

EUVD-2025-21176

Malicious code in bioql PyPI...

EUVD-2023-29918

Malicious code in bioql PyPI...

EUVD-2025-24930

Malicious code in bioql PyPI...

EUVD-2024-52316

Malicious code in bioql PyPI...

EUVD-2023-34278

Malicious code in bioql PyPI...

EUVD-2025-32091

Malicious code in bioql PyPI...

EUVD-2025-30532

Malicious code in bioql PyPI...

EUVD-2025-29910

Malicious code in bioql PyPI...

EUVD-2025-31394

Malicious code in bioql PyPI...

CVE-2025-9209

The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated...

CVE-2025-40646

CVE-2025-40646 describes a Stored Cross-Site Scripting (XSS) in Energy CRM v2025 by Status Tracker Ltd. The vulnerability arises from insufficient validation of user input in a POST to /crm/create_job_submit.php, using the JobCreatedBy parameter. An attacker could craft a request that, when viewe...

CVE-2025-40646 Multiple vulnerabilities in Energy CRM by Status Tracker

Stored Cross-Site Scripting XSS vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/createjobsubmit.php”, using the “JobCreatedBy” parameter. This vulnerability could allow a remote...