EUVD-2022-28631

Malicious code in bioql PyPI...

EUVD-2023-58635

Malicious code in bioql PyPI...

EUVD-2022-28517

Malicious code in bioql PyPI...

EUVD-2023-40698

Malicious code in bioql PyPI...

EUVD-2022-42788

Malicious code in bioql PyPI...

EUVD-2023-32317

Malicious code in bioql PyPI...

EUVD-2023-24188

Malicious code in bioql PyPI...

EUVD-2024-17675

Malicious code in bioql PyPI...

EUVD-2025-5123

Malicious code in bioql PyPI...

EUVD-2024-3615

Malicious code in bioql PyPI...

EUVD-2022-40518

Malicious code in bioql PyPI...

EUVD-2023-51023

Malicious code in bioql PyPI...

EUVD-2023-42747

Malicious code in bioql PyPI...

EUVD-2022-26051

Malicious code in bioql PyPI...

EUVD-2024-50620

Malicious code in bioql PyPI...

EUVD-2024-18242

Malicious code in bioql PyPI...

PT-2025-39823

Name of the Vulnerable Software and Affected Versions Chef Automate versions prior to 4.13.295 Description Chef Automate versions earlier than 4.13.295 on Linux x86 are susceptible to a condition where an authenticated attacker can access restricted functionality. This is due to improperly...

CVE-2025-9018

The Time Tracker plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'ttupdatetablefunction' and 'ttdeleterecordfunction' functions in all versions up to, and including, 3.1.0. This makes it possible for authenticated attackers...

Command Injection

Overview Affected versions of this package are vulnerable to Command Injection due to improper input validation in the alert script check. An attacker can execute arbitrary shell commands on the server by submitting crafted input after authentication. Remediation Upgrade...

CVE-2025-41045 Stored Cross-Site Scripting vulnerability in appRain CMF

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'datasconfigethicallicensekey' parameter in /apprain/admin/config/ethical...