EUVD-2022-3281

Malicious code in bioql PyPI...

EUVD-2024-3285

Malicious code in bioql PyPI...

EUVD-2025-8117

Malicious code in bioql PyPI...

EUVD-2022-2557

Malicious code in bioql PyPI...

EUVD-2025-12095

Malicious code in bioql PyPI...

EUVD-2025-4892

Malicious code in bioql PyPI...

EUVD-2025-21560

Malicious code in bioql PyPI...

EUVD-2025-21561

Malicious code in bioql PyPI...

EUVD-2023-32502

Malicious code in bioql PyPI...

EUVD-2024-50897

Malicious code in bioql PyPI...

EUVD-2021-33999

Malicious code in bioql PyPI...

EUVD-2025-5126

Malicious code in bioql PyPI...

EUVD-2025-30399

Malicious code in bioql PyPI...

EUVD-2024-1295

Malicious code in bioql PyPI...

EUVD-2024-50260

Malicious code in bioql PyPI...

CVE-2025-60454

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the image management module, specifically in the app\system\img\admin\imgadmin.class.php component. The vulnerability allows attackers to upload malicious SVG files containi...

CVE-2025-60451

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module...

Insecure Deserialization

DeepDiff is vulnerable to insecure deserialization.The vulnerability is due to class pollution via the Delta class constructor which, when combined with a gadget in DeltaDiff, allows an attacker to modify deepdiff.serialization.SAFETOIMPORT and trigger insecure Pickle deserialization through Delt...

CVE-2025-60450

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\editor\Uploader.class.php component. This security flaw allows attackers to...

CVE-2025-60454

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the image management module, specifically in the app\system\img\admin\imgadmin.class.php component. The vulnerability allows attackers to upload malicious SVG files containi...