EUVD-2025-28313

Malicious code in bioql PyPI...

EUVD-2022-42497

Malicious code in bioql PyPI...

EUVD-2023-59954

Malicious code in bioql PyPI...

EUVD-2022-55611

Malicious code in bioql PyPI...

EUVD-2025-28072

Malicious code in bioql PyPI...

EUVD-2023-2649

Malicious code in bioql PyPI...

EUVD-2022-5403

Malicious code in bioql PyPI...

EUVD-2024-40156

Malicious code in bioql PyPI...

EUVD-2024-0184

Malicious code in bioql PyPI...

EUVD-2025-29189

Malicious code in bioql PyPI...

EUVD-2023-59867

Malicious code in bioql PyPI...

EUVD-2024-31047

Malicious code in bioql PyPI...

EUVD-2025-30342

Malicious code in bioql PyPI...

EUVD-2025-28947

Malicious code in bioql PyPI...

EUVD-2025-28798

Malicious code in bioql PyPI...

EUVD-2022-51929

Malicious code in bioql PyPI...

EUVD-2025-24864

Malicious code in bioql PyPI...

EUVD-2025-11491

Malicious code in bioql PyPI...

CVE-2025-40990

Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/projectbug/create/xxx", affecting to "title" and "description" parameters via POST. This vulnerability could allow a remote attacker to...

CVE-2025-9885: Cross-Site Request Forgery (CSRF)

The MPWizard – Create Mercado Pago Payment Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation in the '/includes/admin/class-mpwizard-table.php' file. This makes it possible for...