EUVD-2025-28023

Malicious code in bioql PyPI...

EUVD-2022-49830

Malicious code in bioql PyPI...

EUVD-2025-8231

Malicious code in bioql PyPI...

EUVD-2023-44423

Malicious code in bioql PyPI...

EUVD-2023-51023

Malicious code in bioql PyPI...

EUVD-2022-33490

Malicious code in bioql PyPI...

EUVD-2023-26663

Malicious code in bioql PyPI...

EUVD-2023-27175

Malicious code in bioql PyPI...

EUVD-2022-6159

Malicious code in bioql PyPI...

EUVD-2024-19298

Malicious code in bioql PyPI...

aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1463 more potentially affected by CVE-2025-59682 via django (>=5.2.0 <=5.2.6)

django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-59682 Source advisory: OSV:GHSA-Q95W-C7QG-HRFF...

aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1463 more potentially affected by CVE-2025-59681 via django (>=5.2.0 <=5.2.6)

django PYPI version =5.2.0, =0.1.2b0, =0.0.1a1, =0.1.1, =3.1.0b1, =1.0.3, =0.0.1a2, =0.1.0, =0.2.0, =1.0.0, =1.1.0b3, =0.1.0b1, =0.1.0, =1.1.0 and more Source cves: CVE-2025-59681 Source advisory: OSV:GHSA-HPR9-3M2G-3J9P...

Malicious code in org.mixedrealitytoolkit.standardassets (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-43791

Multiple cross-site scripting XSS vulnerabilities in Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via a "Rich Text" field when processing user-supplied input in web content structures, document types, or custom assets. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker...

CVE-2025-43791

Multiple cross-site scripting XSS vulnerabilities in Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 36 allow remote attackers to inject arbitrary web script or HTML via a crafted payload injected...

Leveraging Digital Twin-As-A-Service Towards Continuous and Automated Cybersecurity Certification

Traditional risk assessments rely on manual audits and system scans, often causing operational disruptions and leaving security gaps. To address these challenges, this work presents Security Digital Twin-as-a-Service SDT-aaS, a novel approach that leverages Digital Twin DT technology for automate...

CVE-2025-55238

Dynamics 365 FastTrack Implementation Assets Information Disclosure Vulnerability...

Malicious code in style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin (npm)

The package style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin was found to contain malicious code...

Malicious code in style-loader-optimize-css-assets-webpack-plugin-octans-ursa (npm)

The package style-loader-optimize-css-assets-webpack-plugin-octans-ursa was found to contain malicious code...