EUVD-2020-0039

Malware in sbrugna...

EUVD-2020-11491

Malware in sbrugna...

EUVD-2021-24649

Malware in sbrugna...

EUVD-2021-34128

Malicious code in bioql PyPI...

EUVD-2022-3342

Malicious code in bioql PyPI...

EUVD-2025-18274

Malicious code in bioql PyPI...

EUVD-2023-32436

Malicious code in bioql PyPI...

EUVD-2023-2672

Malicious code in bioql PyPI...

EUVD-2022-5574

Malicious code in bioql PyPI...

EUVD-2025-18272

Malicious code in bioql PyPI...

EUVD-2022-2373

Malicious code in bioql PyPI...

EUVD-2025-18273

Malicious code in bioql PyPI...

EUVD-2021-34129

Malicious code in bioql PyPI...

EUVD-2025-18275

Malicious code in bioql PyPI...

EUVD-2024-2406

Malicious code in bioql PyPI...

EUVD-2024-50522

Malicious code in bioql PyPI...

CVE-2025-57769 FressRSS: Clickjacking can lead to XSS and/or privilege escalation

FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below contain a vulnerability where a specially crafted page can trick a user into executing arbitrary JS code or promoting a user in FreshRSS by obscuring UI elements in iframes. If embedding an authenticated iframe is possibl...

Cross-Site Scripting (XSS)

ibexa/admin-ui is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper handling of user-generated content, allowing attackers with Editor or Administrator privileges to inject persistent XSS payloads that can later execute in the front office...

Cross-Site Scripting (XSS)

ezsystems/ezplatform-admin-ui is vulnerable to Cross-Site Scripting XSS. The vulnerability is due to improper input sanitization and failure to properly escape in editable fields within the back office, allowing malicious scripts to be stored and later executed...

GHSA-5R6X-G6JV-4V87 Ibexa Admin UI XSS vulnerabilities in back office

Impact This security advisory is a part of IBEXA-SA-2025-003, which resolves XSS vulnerabilities in several parts of the back office of Ibexa DXP. Back office access and varying levels of editing and management permissions are required to exploit these vulnerabilities. This typically means Editor...