6609 matches found
CVE-2025-9913 Cross Site Scripting: Session Hijacking
JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking...
EUVD-2025-32503
JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking...
PT-2025-40856
Name of the Vulnerable Software and Affected Versions Dashboard affected versions not specified Description The application is susceptible to session hijacking due to the execution of JavaScript code within the address bar. This is possible through the dashboard's "Open in new Tab" button. This...
CVE-2025-9895
The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the 'subscriber-list-empty.php' file. This makes it possible for unauthenticated attackers to empty the subscrib...
WordPress Notification Bar plugin <= 2.2 - Cross-Site Request Forgery vulnerability
Cross-Site Request Forgery vulnerability discovered by Nabil Irawan in WordPress Plugin Notification Bar versions = 2.2...
EUVD-2024-35406
Malicious code in bioql PyPI...
EUVD-2022-33307
Malicious code in bioql PyPI...
EUVD-2024-17440
Malicious code in bioql PyPI...
EUVD-2024-45498
Malicious code in bioql PyPI...
EUVD-2022-15854
Malicious code in bioql PyPI...
EUVD-2024-42570
Malicious code in bioql PyPI...
EUVD-2022-35861
Malicious code in bioql PyPI...
EUVD-2024-2758
Malicious code in bioql PyPI...
EUVD-2022-33305
Malicious code in bioql PyPI...
EUVD-2024-37549
Malicious code in bioql PyPI...
EUVD-2025-2681
Malicious code in bioql PyPI...
EUVD-2024-29786
Malicious code in bioql PyPI...
EUVD-2022-24770
Malicious code in bioql PyPI...