EUVD-2022-46131

Malicious code in bioql PyPI...

EUVD-2024-52711

Malicious code in bioql PyPI...

EUVD-2023-31023

Malicious code in bioql PyPI...

EUVD-2023-2215

Malicious code in bioql PyPI...

EUVD-2023-35763

Malicious code in bioql PyPI...

EUVD-2025-23374

Malicious code in bioql PyPI...

EUVD-2023-41054

Malicious code in bioql PyPI...

EUVD-2022-38030

Malicious code in bioql PyPI...

EUVD-2024-54226

Malicious code in bioql PyPI...

EUVD-2022-33639

Malicious code in bioql PyPI...

EUVD-2024-50587

Malicious code in bioql PyPI...

EUVD-2025-29671

Malicious code in bioql PyPI...

EUVD-2023-47793

Malicious code in bioql PyPI...

EUVD-2025-32278

The Event Tickets, RSVPs, Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'ticketspot' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible f...

CVE-2025-10179

The My AskAI plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'myaskai' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attacker...

CVE-2025-59415

Frappe Learning is a learning system that helps users structure their content. In versions 2.34.1 and below, there is a security vulnerability in Frappe Learning where the system did not adequately sanitize the content uploaded in the profile bio. Malicious SVG files could be used to execute...

CVE-2025-8153: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting vulnerability in NEC Corporation UNIVERGE IX from Ver.9.5 to Ver.10.7, from Ver.10.8.21 to Ver.10.8.36, from Ver.10.9.11 to Ver.10.9.24, from Ver.10.10.21 to Ver.10.10.31, Ver.10.11.6 and UNIVERGE IX-R/IX-V Ver1.3.16, Ver1.3.21 allows a attacker to inject an arbitrary scripts...

CVE-2025-10126

The MyBrain Utilities plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugins's 'mbumap' shortcode in all versions up to, and including, 1.0.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...

CVE-2025-57642

Tourism Management System 2.0 (v2.0) is vulnerable to a Shell Upload vulnerability (CWE-434) that allows an attacker to upload and execute arbitrary PHP shell scripts on the server. Successful exploitation leads to remote code execution (RCE), unauthorized system access, and potential compromise ...

POS Point of Sale System 6776.php File Cross-Site Scripting Vulnerability

POS Point of Sale System is a pos point of sale system. POS Point of Sale System suffers from a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in the scripts parameter of the...