EUVD-2025-5387

Malicious code in bioql PyPI...

EUVD-2024-46125

Malicious code in bioql PyPI...

EUVD-2023-56901

Malicious code in bioql PyPI...

EUVD-2023-37524

Malicious code in bioql PyPI...

EUVD-2023-53755

Malicious code in bioql PyPI...

EUVD-2023-1594

Malicious code in bioql PyPI...

EUVD-2025-3322

Malicious code in bioql PyPI...

EUVD-2024-30589

Malicious code in bioql PyPI...

EUVD-2023-41701

Malicious code in bioql PyPI...

EUVD-2025-30532

Malicious code in bioql PyPI...

EUVD-2025-8337

Malicious code in bioql PyPI...

EUVD-2025-22128

Malicious code in bioql PyPI...

EUVD-2022-2510

Malicious code in bioql PyPI...

EUVD-2024-52452

Malicious code in bioql PyPI...

EUVD-2024-51507

Malicious code in bioql PyPI...

EUVD-2025-10618

Malicious code in bioql PyPI...

firefox security update

An update is available for firefox. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

Flowise vulnerable to XSS

Summary A XSScross-site scripting vulnerability is caused by insufficient filtering of input by web applications. Attackers can leverage this XSS vulnerability to inject malicious script code HTML code or client-side Javascript code into web pages, and when users browse these web pages, the...

GHSA-8C95-HPQ2-W46F NiceGUI has a Reflected XSS

Summary A Cross-Site Scripting XSS risk exists in NiceGUI when developers render unescaped user input into the DOM using ui.html. Before version 3.0, NiceGUI does not enforce HTML or JavaScript sanitization, so applications that directly combine components like ui.input with ui.html without...

CVE-2025-61599 Emlog is Vulnerable to Stored Cross-Site Scripting (XSS) in "Twitter" Feature via Markdown Input

Emlog is an open source website building system. A stored Cross-Site Scripting XSS vulnerability exists in the "Twitter"feature of EMLOG Pro 2.5.21 and below. An authenticated user with privileges to post a "Twitter" message can inject arbitrary JavaScript code. The malicious script is stored on...