EUVD-2023-52105

Malicious code in bioql PyPI...

EUVD-2022-34580

Malicious code in bioql PyPI...

EUVD-2025-0174

Malicious code in bioql PyPI...

EUVD-2022-4289

Malicious code in bioql PyPI...

EUVD-2022-32967

Malicious code in bioql PyPI...

EUVD-2022-32970

Malicious code in bioql PyPI...

EUVD-2023-50521

Malicious code in bioql PyPI...

EUVD-2025-30199

Malicious code in bioql PyPI...

EUVD-2025-15998

Malicious code in bioql PyPI...

EUVD-2024-3216

Malicious code in bioql PyPI...

EUVD-2023-1170

Malicious code in bioql PyPI...

EUVD-2022-43762

Malicious code in bioql PyPI...

CVE-2025-60447

A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists in the email template configuration component located at /admin/setting.php?action=mail, which allows administrators to input HTML code that is not properly sanitized, leading to...

PT-2025-39905

Name of the Vulnerable Software and Affected Versions FreshRSS versions 1.26.3 and below Description FreshRSS is a free, self-hostable RSS aggregator susceptible to a flaw where a crafted page can mislead a user into executing arbitrary JavaScript code or elevating privileges within FreshRSS. Thi...

CVE-2025-10993 MuYuCMS Template Management admin.php code injection

A security flaw has been discovered in MuYuCMS up to 2.7. Affected by this issue is some unknown functionality of the file /admin.php of the component Template Management. The manipulation results in code injection. It is possible to launch the attack remotely...

CVE-2025-58384

CVE-2025-58384 affects DOXENSE WATCHDOC prior to version 6.1.1.5332. The issue is Deserialization of Untrusted Data via the .NET Remoting library used in the Watchdoc administration interface, enabling remote code execution. Impact is high (remote code execution with network access and no user in...

CVE-2025-10909

Mangati NovoSGA (versions up to 2.2.9) is affected by a Cross-site Scripting (XSS) vulnerability in the SVG File Handler, specifically via manipulation of the logoNavbar/logoLogin arguments in the /admin path. The issue can be exploited remotely; multiple sources report that the exploit is public...

Vulnerability fixed in Fortra's GoAnywhere MFT

Fortra has fixed a vulnerability in GoAnywhere MFT License Servlet Specifically. The vulnerability is in the deserialization of a controlled object within the License Servlet. An attacker could use a forged license response signature to perform command injection, which could lead to unauthorized...

CVE-2025-57295

CVE-2025-57295 affects H3C NX15V100R015 firmware. The root account has no password and the H3C user account uses the default password, both stored in /etc/shadow, enabling attackers with network access to gain unauthorized root-level access via the admin interface or other services. This can lead...

CVE-2025-10617

CVE-2025-10617 affects SourceCodester Online Polling System 1.0. The vulnerability is in the sensitive file /admin/positions.php , where manipulation of the ID argument leads to an SQL injection. The attack can be initiated remotely and, per sources, the exploit has been publicly released. Connec...