7042 matches found
EUVD-2021-32449
Malicious code in bioql PyPI...
EUVD-2022-2005
Malicious code in bioql PyPI...
EUVD-2023-43034
Malicious code in bioql PyPI...
EUVD-2025-8865
Malicious code in bioql PyPI...
EUVD-2024-41463
Malicious code in bioql PyPI...
EUVD-2021-28248
Malicious code in bioql PyPI...
EUVD-2023-37197
Malicious code in bioql PyPI...
EUVD-2023-45789
Malicious code in bioql PyPI...
EUVD-2022-1554
Malicious code in bioql PyPI...
EUVD-2021-31155
Malicious code in bioql PyPI...
EUVD-2025-25311
Malicious code in bioql PyPI...
CVE-2025-60449
An information disclosure vulnerability has been discovered in SeaCMS 13.1. The vulnerability exists in the adminsafe.php component located in the /btcoan/ directory. This security flaw allows authenticated administrators to scan and download not only the application’s source code but also...
CVE-2025-10306
The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the processbackupbatch function. This makes it possible for authenticated attackers, with Administrator-level access and above, to download...
CVE-2025-10306 Backup Bolt <= 1.4.1 - Authenticated (Admin+) Arbitrary File Download
The Backup Bolt plugin for WordPress is vulnerable to arbitrary file downloads and backup location writes in all versions up to, and including, 1.4.1 via the processbackupbatch function. This makes it possible for authenticated attackers, with Administrator-level access and above, to download...
CVE-2025-10306
CVE-2025-10306 – Backup Bolt (WordPress) is a vulnerability in the Backup Bolt plugin affecting all versions up to and including 1.4.1. The flaw, located in process_backup_batch(), allows authenticated attackers with Administrator-level access to download directories outside the webroot and write...
CVE-2025-9332 Interactive Medical Drawing of Human Body <= 2.6 - Authenticated (Admin+) Stored Cross-Site Scripting
The Interactive Human Anatomy with Clickable Body Parts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi...
PT-2025-40495
The Smart Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and...
CVE-2025-60449
An information disclosure vulnerability has been discovered in SeaCMS 13.1. The vulnerability exists in the adminsafe.php component located in the /btcoan/ directory. This security flaw allows authenticated administrators to scan and download not only the application’s source code but also...
PT-2025-40527
Name of the Vulnerable Software and Affected Versions SeaCMS version 13.1 Description An information disclosure issue exists in SeaCMS 13.1. The flaw is located in the admin safe.php component within the /btcoan/ directory. Authenticated administrators can scan and download the application’s sour...
