EUVD-2023-1658

Malicious code in bioql PyPI...

EUVD-2022-53494

Malicious code in bioql PyPI...

EUVD-2025-18305

Malicious code in bioql PyPI...

EUVD-2025-24828

Malicious code in bioql PyPI...

EUVD-2023-30256

Malicious code in bioql PyPI...

EUVD-2022-3376

Malicious code in bioql PyPI...

EUVD-2023-34968

Malicious code in bioql PyPI...

EUVD-2022-3676

Malicious code in bioql PyPI...

EUVD-2022-0672

Malicious code in bioql PyPI...

EUVD-2021-8632

Malicious code in bioql PyPI...

EUVD-2025-6499

Malicious code in bioql PyPI...

EUVD-2025-5179

Malicious code in bioql PyPI...

EUVD-2025-9349

Malicious code in bioql PyPI...

EUVD-2025-21707

Malicious code in bioql PyPI...

EUVD-2022-50808

Malicious code in bioql PyPI...

CVE-2025-60454

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the image management module, specifically in the app\system\img\admin\imgadmin.class.php component. The vulnerability allows attackers to upload malicious SVG files containi...

CVE-2025-60451

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module...

Insecure Deserialization

DeepDiff is vulnerable to insecure deserialization.The vulnerability is due to class pollution via the Delta class constructor which, when combined with a gadget in DeltaDiff, allows an attacker to modify deepdiff.serialization.SAFETOIMPORT and trigger insecure Pickle deserialization through Delt...

CVE-2025-60450

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\editor\Uploader.class.php component. This security flaw allows attackers to...

CVE-2025-60451

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module...