9417 matches found
EUVD-2023-59900
Malicious code in bioql PyPI...
EUVD-2025-29768
Malicious code in bioql PyPI...
EUVD-2025-30342
Malicious code in bioql PyPI...
EUVD-2024-32238
Malicious code in bioql PyPI...
EUVD-2024-15988
Malicious code in bioql PyPI...
EUVD-2024-47535
Malicious code in bioql PyPI...
CVE-2025-40990
Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/projectbug/create/xxx", affecting to "title" and "description" parameters via POST. This vulnerability could allow a remote attacker to...
CVE-2025-9885: Cross-Site Request Forgery (CSRF)
The MPWizard – Create Mercado Pago Payment Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation in the '/includes/admin/class-mpwizard-table.php' file. This makes it possible for...
CVE-2025-54315
The Matrix specification before 1.16 i.e., with a room version before 12 lacks create event uniqueness...
CVE-2025-40990
Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/projectbug/create/xxx", affecting to "title" and "description" parameters via POST. This vulnerability could allow a remote attacker to...
CVE-2025-40990
CVE-2025-40990 describes a Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 (Creativeitem) caused by insufficient validation of user inputs in the POST endpoint /ekushey/index.php/client/project_bug/create/xxx, where the vulnerable parameters are title and description. The weakness c...
CVE-2025-40990 Stored XSS in Creativeitem Ekushey CRM
Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/projectbug/create/xxx", affecting to "title" and "description" parameters via POST. This vulnerability could allow a remote attacker to...
CVE-2025-54315: Improper Enforcement of a Single, Unique Action
The Matrix specification before 1.16 i.e., with a room version before 12 lacks create event uniqueness...
CVE-2025-54315
The Matrix specification before 1.16 i.e., with a room version before 12 lacks create event uniqueness...
CVE-2025-54315
The Matrix specification before 1.16 i.e., with a room version before 12 lacks create event uniqueness...
CVE-2025-54315
The Matrix specification before 1.16 i.e., with a room version before 12 lacks create event uniqueness...
CVE-2025-54315
The CVE-2025-54315 issue affects the Matrix protocol: prior to matrix 1.16 (room version
PT-2025-40337
Name of the Vulnerable Software and Affected Versions Ekushey CRM version 5.0 Description A stored Cross Site Scripting issue exists in Ekushey CRM version 5.0 due to insufficient validation of user-supplied data. The issue is located in the project bug creation functionality, accessible via the...
PT-2025-40415
Name of the Vulnerable Software and Affected Versions The Matrix specification versions prior to 1.16 Description The Matrix specification, when using a room version before 12, does not ensure uniqueness of create events. Recommendations Update to version 1.16 or later...
