716 matches found
EUVD-2024-2656
Malicious code in bioql PyPI...
EUVD-2022-7551
Malicious code in bioql PyPI...
EUVD-2024-0343
Malicious code in bioql PyPI...
EUVD-2025-9320
Malicious code in bioql PyPI...
EUVD-2022-4589
Malicious code in bioql PyPI...
EUVD-2022-43258
Malicious code in bioql PyPI...
EUVD-2025-11720
Malicious code in bioql PyPI...
EUVD-2023-0793
Malicious code in bioql PyPI...
EUVD-2024-0598
Malicious code in bioql PyPI...
EUVD-2024-25091
Malicious code in bioql PyPI...
EUVD-2025-30441
Malicious code in bioql PyPI...
GHSA-PH63-CHVV-8X46 Liferay Portal and DXP audit events record password reminder answers
In Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions the audit events records a user’s password reminder answer, which allows remote...
CVE-2025-43814
In Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions the audit events records a user’s password reminder answer, which allows remote...
CVE-2025-43814
In Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92, and older unsupported versions the audit events records a user’s password reminder answer, which allows remote...
A possible assertion failure when 'stale-answer-client-timeout' is set to '0'
...
CVE-2025-57425
A Stored Cross-Site Scripting XSS vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint...
PT-2025-34788 · Sourcecodester · Faq Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester FAQ Management System version 1.0 Description: A Stored Cross-Site Scripting XSS vulnerability exists in the FAQ Management System. An authenticated attacker can inject malicious JavaScript into the question and answer fields...
CVE-2025-57425
A Stored Cross-Site Scripting XSS vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint...
Linux Distros Unpatched Vulnerability : CVE-2023-2911
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If the recursive-clients quota is reached on a BIND 9 resolver configured with both stale-answer-enable yes; and stale-answer-client-timeout 0;, a sequence of...
Q2A Ultimate SEO 跨站脚本漏洞
Q2A Ultimate SEO is a component of the Q2A Projects team that provides search engine optimization functionality for Question2Answer. A cross-site scripting vulnerability exists in Q2A Ultimate SEO that stems from insufficient validation of the name parameter input in /products//edit, which could...