EUVD-2023-34203

Malicious code in bioql PyPI...

EUVD-2024-16247

Malicious code in bioql PyPI...

EUVD-2024-16246

Malicious code in bioql PyPI...

EUVD-2023-23889

Malicious code in bioql PyPI...

EUVD-2024-19870

Malicious code in bioql PyPI...

EUVD-2024-0393

Malicious code in bioql PyPI...

EUVD-2023-23303

Malicious code in bioql PyPI...

EUVD-2022-52379

Malicious code in bioql PyPI...

EUVD-2022-52349

Malicious code in bioql PyPI...

EUVD-2022-52344

Malicious code in bioql PyPI...

EUVD-2022-53041

Malicious code in bioql PyPI...

EUVD-2024-35496

Malicious code in bioql PyPI...

EUVD-2025-5434

Malicious code in bioql PyPI...

EUVD-2023-23878

Malicious code in bioql PyPI...

EUVD-2023-28471

Malicious code in bioql PyPI...

EUVD-2022-50373

Malicious code in bioql PyPI...

EUVD-2023-57899

Malicious code in bioql PyPI...

Domino Effect: How One Vendor's AI App Breach Toppled Giants

A single AI chatbot breach at Salesloft-Drift exposed data from 700+ companies, including security leaders. The attack shows how AI integrations expand risk, and why controls like IP allow-listing, token security, and monitoring are critical...

CVE-2025-57203

MagicProject AI version 9.1 is affected by a Cross-Site Scripting XSS vulnerability within the chatbot generation feature available to authenticated admin users. The vulnerability resides in the prompt parameter submitted to the /dashboard/user/generator/generate-stream endpoint via a...

CVE-2025-57203

MagicProject AI (version 9.1) is vulnerable to a Cross-Site Scripting (XSS) flaw within the chatbot generation feature. The root cause is insufficient input sanitization of the prompt parameter submitted via a multipart/form-data POST request to the /dashboard/user/generator/generate-stream endpo...