EUVD-2024-1550

Malicious code in bioql PyPI...

EUVD-2023-45792

Malicious code in bioql PyPI...

EUVD-2023-49358

Malicious code in bioql PyPI...

EUVD-2025-28990

Malicious code in bioql PyPI...

EUVD-2024-33989

Malicious code in bioql PyPI...

EUVD-2024-32654

Malicious code in bioql PyPI...

EUVD-2025-31218

Malicious code in bioql PyPI...

EUVD-2022-24353

Malicious code in bioql PyPI...

EUVD-2024-19514

Malicious code in bioql PyPI...

EUVD-2025-16395

Malicious code in bioql PyPI...

EUVD-2023-51353

Malicious code in bioql PyPI...

EUVD-2023-24082

Malicious code in bioql PyPI...

EUVD-2021-31155

Malicious code in bioql PyPI...

EUVD-2021-7556

Malicious code in bioql PyPI...

EUVD-2025-30310

Malicious code in bioql PyPI...

CVE-2025-60449

An information disclosure vulnerability has been discovered in SeaCMS 13.1. The vulnerability exists in the adminsafe.php component located in the /btcoan/ directory. This security flaw allows authenticated administrators to scan and download not only the application’s source code but also...

CVE-2025-10306

The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the processbackupbatch function. This makes it possible for authenticated attackers, with Administrator-level access and above, to download...

CVE-2025-10306

CVE-2025-10306 – Backup Bolt (WordPress) is a vulnerability in the Backup Bolt plugin affecting all versions up to and including 1.4.1. The flaw, located in process_backup_batch(), allows authenticated attackers with Administrator-level access to download directories outside the webroot and write...

CVE-2025-10306 Backup Bolt <= 1.4.1 - Authenticated (Admin+) Arbitrary File Download

The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the processbackupbatch function. This makes it possible for authenticated attackers, with Administrator-level access and above, to download...

CVE-2025-9332 Interactive Medical Drawing of Human Body <= 2.6 - Authenticated (Admin+) Stored Cross-Site Scripting

The Interactive Human Anatomy with Clickable Body Parts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...