EUVD-2025-29349

Malicious code in bioql PyPI...

EUVD-2024-26813

Malicious code in bioql PyPI...

EUVD-2024-45109

Malicious code in bioql PyPI...

EUVD-2022-33309

Malicious code in bioql PyPI...

EUVD-2025-30393

Malicious code in bioql PyPI...

EUVD-2025-13777

Malicious code in bioql PyPI...

EUVD-2024-31639

Malicious code in bioql PyPI...

EUVD-2025-27431

Malicious code in bioql PyPI...

EUVD-2021-29081

Malicious code in bioql PyPI...

EUVD-2022-40760

Malicious code in bioql PyPI...

EUVD-2022-15594

Malicious code in bioql PyPI...

EUVD-2025-1578

Malicious code in bioql PyPI...

EUVD-2025-7854

Malicious code in bioql PyPI...

CVE-2025-9895

The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the 'subscriber-list-empty.php' file. This makes it possible for unauthenticated attackers to empty the subscrib...

CVE-2025-9895

CVE-2025-9895 : The WordPress plugin Notification Bar (versions

CVE-2025-9895 Notification Bar <= 2.2 - Cross-Site Request Forgery

The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the 'subscriber-list-empty.php' file. This makes it possible for unauthenticated attackers to empty the subscrib...

PT-2025-40508

Name of the Vulnerable Software and Affected Versions Notification Bar plugin for WordPress versions prior to 2.3 Description The Notification Bar plugin for WordPress is susceptible to Cross-Site Request Forgery CSRF. This is caused by insufficient or incorrect nonce validation within the...

WordPress plugin Notification Bar 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site request...

Cross-site Scripting (XSS)

Overview DotNetNuke.Core is a references provider to the DotNetNuke.dll to develop extensions for the DNN Platform. Affected versions of this package are vulnerable to Cross-site Scripting XSS in the Persona Bar module. An attacker can inject and execute arbitrary scripts by setting crafted HTML ...

DNN Vulnerable to Stored XSS Using Backend Admin Credentials

Summary Users that can edit modules could set a title that includes scripts. Description Some users administrators and content editors can set html in module titles and that could include javascript which could be used for XSS based attacks. With the addition of more roles being able to set modul...