EUVD-2024-52258

Malicious code in bioql PyPI...

EUVD-2022-5153

Malicious code in bioql PyPI...

EUVD-2021-7072

Malicious code in bioql PyPI...

EUVD-2024-54331

Malicious code in bioql PyPI...

EUVD-2025-23286

Malicious code in bioql PyPI...

EUVD-2024-41277

Malicious code in bioql PyPI...

EUVD-2023-12120

Malicious code in bioql PyPI...

EUVD-2023-12123

Malicious code in bioql PyPI...

EUVD-2025-11966

Malicious code in bioql PyPI...

EUVD-2022-27657

Malicious code in bioql PyPI...

CVE-2025-51857

The reconcile method in the AttachmentReconciler class of the Halo system v.2.20.18LTS and before is vulnerable to XSS attacks...

CVE-2025-51857

The Halo website builder (v.2.20.18LTS and earlier) is vulnerable to Cross-Site Scripting (XSS) attacks. The root cause is located in the reconcile method of the AttachmentReconciler class , where input is not properly neutralized during web page generation. This vulnerability allows for potentia...

CVE-2025-53541 Tuleap is vulnerable to XSS attacks when displaying the children of a parent artifact

Tuleap is an Open Source Suite created to facilitate management of software development and collaboration. In Tuleap Community Edition prior to version 16.9.99.1751892857 and Tuleap Enterprise Edition prior to 16.8-5 and 16.9-3, malicious users with some control over certain artifacts could inser...

GO-2025-3817 Grafana is vulnerable to XSS attacks through open redirects and path traversal in github.com/grafana/grafana

Grafana is vulnerable to XSS attacks through open redirects and path traversal in github.com/grafana/grafana. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports fro...

K000152671: Golang html/template vulnerabilities CVE-2023-39318,CVE-2023-39319, and CVE-2024-24785

Security Advisory Description CVE-2023-39318 The html/template package does not properly handle HTML-like "" comment tokens, nor hashbang "!" comment tokens, in contexts. This may cause the template parser to improperly interpret the contents of contexts, causing actions to be improperly escaped...

CVE-2025-6023

A Cross-site scripting XSS vulnerability was found in Grafana caused by client path traversal and open redirect. This flaw allows attackers to redirect users to malicious websites that execute arbitrary JavaScript code in scripted dashboards. Unlike many other XSS vulnerabilities, this...

CVE-2025-54316

An issue was discovered in Logpoint before 7.6.0. When creating reports, attackers can create custom Jinja templates that chained built-in filter functions to generate XSS payloads. These payloads can be rendered by the Logpoint Report Template engine, making it vulnerable to cross-site scripting...

CVE-2025-54316

An issue was discovered in Logpoint before 7.6.0. When creating reports, attackers can create custom Jinja templates that chained built-in filter functions to generate XSS payloads. These payloads can be rendered by the Logpoint Report Template engine, making it vulnerable to cross-site scripting...

CVE-2025-6023

An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0. The open redirect can be chained with path traversal vulnerabilities to achieve XSS. Fixed in versions 12.0.2+security-01,...

CVE-2025-6023

Grafana OSS is affected by CVE-2025-6023, an open redirect vulnerability introduced in v11.5.0 that can be chained with path traversal to trigger XSS in scripted dashboards. Affected component: Grafana open redirect in organization switching (also described as an open redirect in organization swi...