1274 matches found
CVE-2025-60312
Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting XSS in the "Markdown Input" field, allowing a remote attacker to inject arbitrary HTML/JavaScript code that executes in the victim's browser upon clicking the "Convert to HTML" button...
EUVD-2025-32717
Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting XSS in the "Markdown Input" field, allowing a remote attacker to inject arbitrary HTML/JavaScript code that executes in the victim's browser upon clicking the "Convert to HTML" button...
CVE-2025-60312
Sourcecodester Markdown to HTML Converter v1.0 is vulnerable to a Cross-Site Scripting (XSS) flaw within the Markdown Input field. A remote attacker can inject arbitrary HTML or JavaScript code, which then executes in the victim's browser when the Convert to HTML button is clicked. To remediate t...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-986285)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986285 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/virtio: fix NULL pointer dereference in virtiogpuconngetmodes drmcvtmode may return NULL and ...
RockyLinux 9 : corosync (RLSA-2025:7201)
The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:7201 advisory. corosync: Stack buffer overflow from 'orftokenendianconvert' CVE-2025-30472 Tenable has extracted the preceding description block directly from the RockyLinux...
CVE-2025-9952: Improper Neutralization of Input During Web Page Generation
The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5.20.2 due to insufficient input sanitization and output escaping. This makes ...
CVE-2025-9886: Cross-Site Request Forgery (CSRF)
The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.20.2. This is due to missing or incorrect nonce validation in the '/admin/inc/post-management.php' file. This...
EUVD-2024-29023
Malicious code in bioql PyPI...
EUVD-2024-43298
Malicious code in bioql PyPI...
EUVD-2025-26678
Malicious code in bioql PyPI...
EUVD-2023-1184
Malicious code in bioql PyPI...
EUVD-2021-32229
Malicious code in bioql PyPI...
EUVD-2023-1224
Malicious code in bioql PyPI...
EUVD-2024-29930
Malicious code in bioql PyPI...
EUVD-2024-45886
Malicious code in bioql PyPI...
EUVD-2022-39140
Malicious code in bioql PyPI...
EUVD-2023-2825
Malicious code in bioql PyPI...
EUVD-2025-29224
Malicious code in bioql PyPI...