EUVD-2022-43275

Malicious code in bioql PyPI...

EUVD-2025-13598

Malicious code in bioql PyPI...

EUVD-2025-18449

Malicious code in bioql PyPI...

EUVD-2024-16575

Malicious code in bioql PyPI...

EUVD-2022-51874

Malicious code in bioql PyPI...

EUVD-2023-0887

Malicious code in bioql PyPI...

EUVD-2022-37818

Malicious code in bioql PyPI...

EUVD-2023-57860

Malicious code in bioql PyPI...

EUVD-2022-53387

Malicious code in bioql PyPI...

EUVD-2022-51871

Malicious code in bioql PyPI...

EUVD-2024-52564

Malicious code in bioql PyPI...

EUVD-2025-8271

Malicious code in bioql PyPI...

CVE-2025-10042

The Quiz Maker plugin for WordPress is vulnerable to SQL Injection via spoofed IP headers in all versions up to, and including, 6.7.0.56 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2025-10485

A vulnerability has been found in pojoin h3blog up to 5bf704425ebc11f4c24da51f32f36bb17ae20489. Affected by this issue is the function pptlog of the file /login of the component HTTP Header Handler. Such manipulation of the argument X-Forwarded-For leads to cross site scripting. The attack may be...

CVE-2025-10042: Improper Neutralization of Special Elements used in an SQL Command

The Quiz Maker plugin for WordPress is vulnerable to SQL Injection via spoofed IP headers in all versions up to, and including, 6.7.0.56 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

CVE-2025-10485: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in pojoin h3blog up to 5bf704425ebc11f4c24da51f32f36bb17ae20489. Affected by this issue is the function pptlog of the file /login of the component HTTP Header Handler. Such manipulation of the argument X-Forwarded-For leads to cross site scripting. The attack may be...

PT-2025-37776

Name of the Vulnerable Software and Affected Versions: pojoin h3blog versions prior to 5bf704425ebc11f4c24da51f32f36bb17ae20489 Description: A vulnerability exists due to cross site scripting. Manipulation of the X-Forwarded-For argument in the /login file, specifically within the ppt log functio...

Linux Distros Unpatched Vulnerability : CVE-2020-1755

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle before 3.8.2, 3.7.5, 3.6.9 and 3.5.11, X-Forwarded-For headers could be used to spoof a user's IP, in order to bypass remote address checks...

CVE-2025-55473: Improper Neutralization of Input During Web Page Generation

Asian Arts Talents Foundation AATF Website v5.1.x and Docker version 2024.12.8.1 are vulnerable to Cross Site Scripting XSS. The vulnerability exists in the /ip.php endpoint, which processes and displays the X-Forwarded-For HTTP header without proper sanitization or output encoding. This allows a...

CVE-2025-55473

The Asian Arts Talents Foundation (AATF) Website (v5.1.x) and its Docker image (version 2024.12.8.1) are vulnerable to Cross-Site Scripting (XSS) . The flaw resides in the /ip.php endpoint, which fails to properly sanitize or encode the X-Forwarded-For HTTP header. An attacker can exploit this by...