3457 matches found
EUVD-2025-1589
Malicious code in bioql PyPI...
EUVD-2022-40405
Malicious code in bioql PyPI...
EUVD-2023-35102
Malicious code in bioql PyPI...
EUVD-2023-27124
Malicious code in bioql PyPI...
EUVD-2023-54346
Malicious code in bioql PyPI...
EUVD-2023-55051
Malicious code in bioql PyPI...
EUVD-2022-39411
Malicious code in bioql PyPI...
EUVD-2022-31471
Malicious code in bioql PyPI...
CVE-2025-40647
Stored Cross-Site Scripting XSS vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'email' parameter in '/index.php?menu=addressbook'...
BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability
...
CVE-2025-40647
Stored Cross-Site Scripting XSS vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'email' parameter in '/index.php?menu=addressbook'...
CVE-2025-40647
The CVE-2025-40647 entry concerns Issabel v5.0.0 with a stored XSS vulnerability in the web UI, caused by insufficient validation of user input in the email parameter of /index.php?menu=address_book. Public references describe a stored XSS that can be triggered via this parameter, with CVSS v4.0 ...
CVE-2025-40647 Stored Cross-Site Scripting (XSS) vulnerability in Issabel products
Stored Cross-Site Scripting XSS vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'email' parameter in '/index.php?menu=addressbook'...
CVE-2025-40647 Stored Cross-Site Scripting (XSS) vulnerability in Issabel products
Stored Cross-Site Scripting XSS vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'email' parameter in '/index.php?menu=addressbook'...
PT-2025-40240
Name of the Vulnerable Software and Affected Versions Issabel version 5.0.0 Description A stored Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. The issue is triggered through the email parameter in the '/index.php?menu=address book' API endpoint. This...
Malicious code in tailwind-book-icon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a77e33471f0d16f5b406208e04d34125e1c4f845c41308c0de42a0ac76b7a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-47498 Malicious code in tailwind-book-icon (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d2a77e33471f0d16f5b406208e04d34125e1c4f845c41308c0de42a0ac76b7a7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious Package
Overview tailwind-book-icon is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
CTF-All-In-One
This is a repository for a book titled "CTF-All-In-One" by firmianay. The book is a comprehensive guide to CTF Capture The Flag competitions, covering various topics such as Linux, Web security, reverse engineering, and cryptography. The repository contains the source code and materials for the...
CVE-2025-43774
A reflected cross-site scripting XSS vulnerability in the Liferay Portal 7.4.3.132, and Liferay DXP 2025.Q1.0 through 2025.Q1.17 allows a remote authenticated user to inject JavaScript code via Style Book theme name. This malicious payload is then reflected and executed within the user's browser...