PT-2026-3944

Name of the Vulnerable Software and Affected Versions Typebot versions prior to 3.13.2 Description Typebot, an open-source chatbot builder, has a flaw where client-side script execution can lead to the theft of stored credentials from any user. When a victim previews a malicious typebot by clicki...

EUVD-2019-7004

Malware in sbrugna...

EUVD-2017-0006

Malware in sbrugna...

EUVD-2019-16389

Malware in sbrugna...

EUVD-2017-1507

Malware in sbrugna...

EUVD-2018-0750

Malware in sbrugna...

EUVD-2016-10634

Malware in sbrugna...

EUVD-2024-20705

Malicious code in bioql PyPI...

EUVD-2023-45031

Malicious code in bioql PyPI...

EUVD-2024-28049

Malicious code in bioql PyPI...

EUVD-2025-22327

Malicious code in bioql PyPI...

EUVD-2025-14288

Malicious code in bioql PyPI...

EUVD-2024-20706

Malicious code in bioql PyPI...

EUVD-2022-47691

Malicious code in bioql PyPI...

EUVD-2023-52313

Malicious code in bioql PyPI...

EUVD-2024-28083

Malicious code in bioql PyPI...

EUVD-2025-22332

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Name field in Kaleo Forms Admin. An attacker can execute arbitrary JavaScript code in the context of the user's browser by injecting a malicious payload that is stored and rendered without proper...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the WEEKEND-PLANS field. An attacker can execute arbitrary code in the context of the affected application by submitting a specially crafted payload. Details Cross-site scripting or XSS is a code vulnerabili...

CVE-2025-51859

Stored Cross-Site Scripting XSS vulnerability in Chaindesk thru 2025-05-26 in its agent chat component. An attacker can achieve arbitrary client-side script execution by crafting an AI agent whose system prompt instructs the underlying Large Language Model LLM to embed malicious script payloads...