EUVD-2023-51004

Malicious code in bioql PyPI...

EUVD-2025-10260

Malicious code in bioql PyPI...

EUVD-2025-24621

Malicious code in bioql PyPI...

EUVD-2025-28042

Malicious code in bioql PyPI...

EUVD-2022-51170

Malicious code in bioql PyPI...

EUVD-2023-42199

Malicious code in bioql PyPI...

EUVD-2024-29268

Malicious code in bioql PyPI...

EUVD-2022-51171

Malicious code in bioql PyPI...

EUVD-2024-53768

Malicious code in bioql PyPI...

A Bootiful Podcast: Dr. Kris De Volder on developer tooling for Spring developers and AI

Hi, Spring fans! In this installment we talk to Spring tooling legend Dr. Kris De Volder on tooling, AI, and so much more...

WordPress Werk aan de Muur Plugin <= 1.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Werk aan de Muur versions = 1.5...

PT-2025-43300

Name of the Vulnerable Software and Affected Versions Werk aan de Muur versions prior to 1.6 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level access and above to inject arbitrary...

CVE-2025-10947 Sistemas Pleno Gestão de Locação CPF validarCpf authorization

A flaw has been found in Sistemas Pleno Gestão de Locação up to 2025.7.x. The impacted element is an unknown function of the file /api/areacliente/pessoa/validarCpf of the component CPF Handler. Executing a manipulation of the argument pescpf can lead to authorization bypass. The attack can be...

CVE-2025-10947: Authorization Bypass Through User-Controlled Key

A flaw has been found in Sistemas Pleno Gestão de Locação up to 2025.7.x. The impacted element is an unknown function of the file /api/areacliente/pessoa/validarCpf of the component CPF Handler. Executing a manipulation of the argument pescpf can lead to authorization bypass. The attack can be...

exploit-example

Reporte de Vulnerabilidades de Seguridad en net/ 1. VALIDA...

XSScpl

XSScpl - Scanner Profissional de XSS Refletido O que é? XS...

CVE-2025-58144

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL...

CVE-2025-58145

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL...

CVE-2025-58145: Concurrent Execution using Shared Resource with Improper Synchronization

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL...

CVE-2025-10074 Portabilis i-Educar tipos cross site scripting

A vulnerability was identified in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /usuarios/tipos/. The manipulation of the argument Tipos de Usuário/Descrição leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly...