5583 matches found
PT-2025-41200
Name of the Vulnerable Software and Affected Versions OPEXUS FOIAXpress versions prior to 11.13.3.0 Description OPEXUS FOIAXpress before version 11.13.3.0 allows an administrative user to inject JavaScript or other content as a URL within the Technical Support Hyperlink Manager. This injected...
Phishers target 1Password users with convincing fake breach alert
In a very recent and well-targeted phishing attempt, scammers tried to get hold of the 1Password credentials belonging to a Malwarebytes’ employee. Stealing someone’s 1Password login would be like hitting the jackpot for cybercriminals, because they potentially export all the saved logins the...
GHSA-7RGR-72HP-9WP3 Duplicate Advisory: Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-964p-j4gg-mhwc. This link is maintained to preserve external references. Original Description Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log...
GHSA-7R4H-VMJ9-WG42 Flowise Stored XSS vulnerability through logs in chatbot
Description In the chat log, tags like input and form are allowed. This makes a potential vulnerability where an attacker could inject malicious HTML into the log via prompts. When an admin views the log containing the malicious HTML, the attacker could steal the admin's credentials or sensitive...
Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel
Summary A stored Cross-Site Scripting XSS vulnerability in FlowiseAI allows a user to inject arbitrary JavaScript code via message input. When an administrator views messages using the "View Messages" button in the workflow UI, the malicious script executes in the context of the admin’s browser,...
GHSA-964P-J4GG-MHWC Flowise is vulnerable to stored XSS via "View Messages" allows credential theft in FlowiseAI admin panel
Summary A stored Cross-Site Scripting XSS vulnerability in FlowiseAI allows a user to inject arbitrary JavaScript code via message input. When an administrator views messages using the "View Messages" button in the workflow UI, the malicious script executes in the context of the admin’s browser,...
EUVD-2022-41770
Malicious code in bioql PyPI...
EUVD-2023-0504
Malicious code in bioql PyPI...
EUVD-2022-6728
Malicious code in bioql PyPI...
EUVD-2023-23885
Malicious code in bioql PyPI...
EUVD-2024-39538
Malicious code in bioql PyPI...
EUVD-2023-55131
Malicious code in bioql PyPI...
EUVD-2025-14899
Malicious code in bioql PyPI...
EUVD-2022-3381
Malicious code in bioql PyPI...
EUVD-2025-30250
Malicious code in bioql PyPI...
EUVD-2022-5450
Malicious code in bioql PyPI...
EUVD-2025-13505
Malicious code in bioql PyPI...
EUVD-2022-2526
Malicious code in bioql PyPI...