EUVD-2024-19662

Malicious code in bioql PyPI...

EUVD-2022-2588

Malicious code in bioql PyPI...

EUVD-2022-26500

Malicious code in bioql PyPI...

EUVD-2022-27949

Malicious code in bioql PyPI...

EUVD-2024-2468

Malicious code in bioql PyPI...

EUVD-2025-1809

Malicious code in bioql PyPI...

EUVD-2025-9052

Malicious code in bioql PyPI...

EUVD-2022-55224

Malicious code in bioql PyPI...

EUVD-2025-4633

Malicious code in bioql PyPI...

EUVD-2024-1670

Malicious code in bioql PyPI...

EUVD-2022-55239

Malicious code in bioql PyPI...

EUVD-2024-1180

Malicious code in bioql PyPI...

EUVD-2023-38326

Malicious code in bioql PyPI...

EUVD-2022-1052

Malicious code in bioql PyPI...

CVE-2025-9889 ContentMX Content Publisher <= 1.0.6 - Cross-Site Request Forgery

The ContentMX Content Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the cmxactivateconnection function. This makes it possible for unauthenticated attackers to bind...

CVE-2025-9889 ContentMX Content Publisher <= 1.0.6 - Cross-Site Request Forgery

The ContentMX Content Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the cmxactivateconnection function. This makes it possible for unauthenticated attackers to bind...

PT-2025-40506

Name of the Vulnerable Software and Affected Versions ContentMX Content Publisher plugin for WordPress versions up to and including 1.0.6 Description The software is susceptible to a Cross-Site Request Forgery CSRF issue. This is caused by a lack of, or incorrect, nonce validation in the cmx...

CVE-2025-59752

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

Malicious Package

Overview exceptiongroup is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2025-59743 Multiple vulnerabilities in AndSoft's e-TMS

SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'SessionID' cookie in '/inc/connect/CONNECTION.ASP'...