EUVD-2025-23615

Malicious code in bioql PyPI...

EUVD-2022-7576

Malicious code in bioql PyPI...

EUVD-2025-9672

Malicious code in bioql PyPI...

EUVD-2024-33367

Malicious code in bioql PyPI...

EUVD-2025-8501

Malicious code in bioql PyPI...

EUVD-2025-2056

Malicious code in bioql PyPI...

EUVD-2022-42985

Malicious code in bioql PyPI...

EUVD-2023-44480

Malicious code in bioql PyPI...

EUVD-2022-42890

Malicious code in bioql PyPI...

EUVD-2023-33960

Malicious code in bioql PyPI...

EUVD-2023-50046

Malicious code in bioql PyPI...

EUVD-2022-43299

Malicious code in bioql PyPI...

EUVD-2023-23743

Malicious code in bioql PyPI...

EUVD-2023-0882

Malicious code in bioql PyPI...

EUVD-2022-51766

Malicious code in bioql PyPI...

EUVD-2025-16008

Malicious code in bioql PyPI...

Vulnerability fixed in FreePBX

FreePBX has fixed a vulnerability in versions 15, 16 and 17. The vulnerability allows attackers to gain unauthorized access and potentially execute remote code by exploiting a validation and remediation error in the processing of user-supplied input, such as in the "endpoint" module. FreePBX...

CVE-2025-8552 atjiu pybbs list cross site scripting

A vulnerability classified as problematic has been found in atjiu pybbs up to 6.0.0. This affects an unknown part of the file /admin/tag/list. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

CVE-2025-7865 thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting

A vulnerability was found in thinkgem JeeSite up to 5.12.0. It has been declared as problematic. This vulnerability affects the function xssFilter of the file src/main/java/com/jeesite/common/codec/EncodeUtils.java of the component XSS Filter. The manipulation of the argument text leads to cross...

CVE-2025-7785

CVE-2025-7785 affects thinkgem JeeSite up to version 5.12.0. The vulnerability lies in the sso function of SsoController.java, where manipulation of the redirect parameter enables an open redirect. The issue is remotely exploitable and has been publicly disclosed. A patch is available (commit: 3d...