EUVD-2022-32967

Malicious code in bioql PyPI...

EUVD-2022-32970

Malicious code in bioql PyPI...

EUVD-2025-27019

Malicious code in bioql PyPI...

EUVD-2022-34580

Malicious code in bioql PyPI...

EUVD-2024-0373

Malicious code in bioql PyPI...

EUVD-2023-3138

Malicious code in bioql PyPI...

EUVD-2023-52105

Malicious code in bioql PyPI...

EUVD-2025-15998

Malicious code in bioql PyPI...

EUVD-2025-18488

Malicious code in bioql PyPI...

EUVD-2022-43762

Malicious code in bioql PyPI...

EUVD-2025-30199

Malicious code in bioql PyPI...

EUVD-2022-31934

Malicious code in bioql PyPI...

EUVD-2025-15819

Malicious code in bioql PyPI...

CVE-2025-60447

A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists in the email template configuration component located at /admin/setting.php?action=mail, which allows administrators to input HTML code that is not properly sanitized, leading to...

PT-2025-39905

Name of the Vulnerable Software and Affected Versions FreshRSS versions 1.26.3 and below Description FreshRSS is a free, self-hostable RSS aggregator susceptible to a flaw where a crafted page can mislead a user into executing arbitrary JavaScript code or elevating privileges within FreshRSS. Thi...

CVE-2025-10993 MuYuCMS Template Management admin.php code injection

A security flaw has been discovered in MuYuCMS up to 2.7. Affected by this issue is some unknown functionality of the file /admin.php of the component Template Management. The manipulation results in code injection. It is possible to launch the attack remotely...

CVE-2025-58384

DOXENSE WATCHDOC (versions prior to 6.1.1.5332 ) is vulnerable to remote code execution due to a deserialization of untrusted data flaw in the .NET Remoting library within the administration interface. An unauthenticated attacker can exploit this by sending a specially crafted API request to an e...

CVE-2025-10909

Mangati NovoSGA (versions up to 2.2.9) is affected by a Cross-site Scripting (XSS) vulnerability in the SVG File Handler, specifically via manipulation of the logoNavbar/logoLogin arguments in the /admin path. The issue can be exploited remotely; multiple sources report that the exploit is public...

Vulnerability fixed in Fortra's GoAnywhere MFT

Fortra has fixed a vulnerability in GoAnywhere MFT License Servlet Specifically. The vulnerability is in the deserialization of a controlled object within the License Servlet. An attacker could use a forged license response signature to perform command injection, which could lead to unauthorized...

CVE-2025-57295

H3C devices running firmware version NX15V100R015 are vulnerable to unauthorized access due to insecure default credentials . The root user account has no password set, and the H3C user account uses the default password "admin"; both are stored in the /etc/shadow file. Attackers with network acce...