EUVD-2025-204499

Malicious code in viktorparserctf6 npm...

EUVD-2025-204502

Malicious code in adk-cli npm...

EUVD-2025-204504

Malicious code in hubstyletokens npm...

EUVD-2025-204511

Malicious code in graphlink npm...

EUVD-2025-204518

Malicious code in androidteminatorx npm...

EUVD-2025-204473

Malicious code in my-ctf-package npm...

EUVD-2025-204525

Malicious code in connections-api-hidden-runner PyPI...

EUVD-2025-204477

Malicious code in react-enhanced-glow npm...

EUVD-2025-204441

Not used...

EUVD-2025-204445

Not used...

EUVD-2025-204444

Not used...

EUVD-2025-204442

Not used...

EUVD-2025-204321

BullWall Server Intrusion Protection has a noticeable delay before the MFA check when connecting via RDP. A remote authenticated attacker with administrative privileges can potentially bypass detection during this window. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 were confirmed to be...

EUVD-2025-204318

An insecure deserialization vulnerability exists in the download.php script of the to3k Twittodon application through commit b1c58a7d1dc664b38deb486ca290779621342c0b 2023-02-28. The 'obj' parameter receives base64-encoded data that is passed directly to the unserialize function without validation...

EUVD-2025-204322

Due to a product misconfiguration in certain deployment types, it was possible from different pods in the same namespace to communicate with each other. This issue resulted in bypass of access control due to the presence of a vulnerable endpoint in Foundry Container Service that executed...

EUVD-2025-204313

BullWall Ransomware Containment relies on the number of file modifications to trigger detection. An authenticated attacker could encrypt a single large file without triggering a detection alert. Versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4 were confirmed to be affected; other versions before a...

EUVD-2025-204325

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the Checkbox form component. This allows malicious scripts to execute in users' browsers by exploiting HTML support in the form builder...

EUVD-2025-204362

A stored cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious code into shipping options configuration. This could lead to potential theft of sensitive data by executing malicious scripts in users' browsers...

EUVD-2025-204341

EasyPHP Webserver 14.1 contains an OS command injection vulnerability that allows unauthenticated attackers to execute arbitrary system commands by injecting malicious payloads through the appservicecontrol parameter. Attackers can send POST requests to /index.php?zone=settings with crafted...

EUVD-2025-204354

A reflected cross-site scripting vulnerability in Kentico Xperience allows attackers to inject malicious scripts via the Pages dashboard widget configuration dialog. Attackers can exploit this vulnerability to execute malicious scripts in administrative users' browsers...