EUVD-2025-28246

Malicious code in bioql PyPI...

EUVD-2022-32130

Malicious code in bioql PyPI...

EUVD-2023-42318

Malicious code in bioql PyPI...

EUVD-2025-31037

Malicious code in bioql PyPI...

EUVD-2023-27796

Malicious code in bioql PyPI...

EUVD-2023-29689

Malicious code in bioql PyPI...

EUVD-2023-29690

Malicious code in bioql PyPI...

EUVD-2023-29903

Malicious code in bioql PyPI...

EUVD-2024-34578

Malicious code in bioql PyPI...

EUVD-2022-45084

Malicious code in bioql PyPI...

EUVD-2023-37777

Malicious code in bioql PyPI...

EUVD-2021-8255

Malicious code in bioql PyPI...

EUVD-2021-8170

Malicious code in bioql PyPI...

EUVD-2022-5018

Malicious code in bioql PyPI...

CVE-2025-52433

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...

CVE-2025-6815

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘servicename’ parameter in all versions up to, and including, 5.1.94 due to insufficient input sanitization and output escaping. This makes it possible for...

CVE-2025-6815

The LatePoint – Calendar Booking Plugin for Appointments and Events plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘servicename’ parameter in all versions up to, and including, 5.1.94 due to insufficient input sanitization and output escaping. This makes it possible for...

Cisco IOS XE Software HTTP API Command Injection Vulnerability

A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with root privileges into the underlying operating system. This vulnerability is due to insufficient input validation. An attacker with administrative privileges...

CVE-2025-57205

iNiLabs School Express SMS Express 6.2 is affected by a Stored Cross-Site Scripting XSS vulnerability in the content-management features available to authenticated admin users. The vulnerability resides in POSTed editor parameters submitted to the /posts/edit/id endpoint and similarly in Notice a...

CVE-2025-57203

MagicProject AI version 9.1 is affected by a Cross-Site Scripting XSS vulnerability within the chatbot generation feature available to authenticated admin users. The vulnerability resides in the prompt parameter submitted to the /dashboard/user/generator/generate-stream endpoint via a...