EUVD-2025-2781

Malicious code in bioql PyPI...

EUVD-2024-50310

Malicious code in bioql PyPI...

EUVD-2021-32560

Malicious code in bioql PyPI...

EUVD-2024-29783

Malicious code in bioql PyPI...

EUVD-2021-32554

Malicious code in bioql PyPI...

EUVD-2023-56447

Malicious code in bioql PyPI...

CVE-2025-58617

Missing Authorization vulnerability in FAKTOR VIER F4 Media Taxonomies f4-media-taxonomies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects F4 Media Taxonomies: from n/a through = 1.1.4...

CVE-2025-58617

Missing Authorization vulnerability in FAKTOR VIER F4 Media Taxonomies f4-media-taxonomies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects F4 Media Taxonomies: from n/a through = 1.1.4...

WordPress F4 Media Taxonomies Plugin <= 1.1.4 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Nabil Irawan in WordPress Plugin F4 Media Taxonomies versions = 1.1.4...

CVE-2025-58617

CVE-2025-58617 concerns the WordPress plugin F4 Media Taxonomies (

CVE-2025-58617 WordPress F4 Media Taxonomies Plugin <= 1.1.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in FAKTOR VIER F4 Media Taxonomies f4-media-taxonomies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects F4 Media Taxonomies: from n/a through = 1.1.4...

CVE-2025-58617 WordPress F4 Media Taxonomies Plugin <= 1.1.4 - Broken Access Control Vulnerability

Missing Authorization vulnerability in FAKTOR VIER F4 Media Taxonomies f4-media-taxonomies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects F4 Media Taxonomies: from n/a through = 1.1.4...

WordPress plugin F4 Media Taxonomies 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

MAL-2025-11419 Malicious code in @zalastax/nolb-f4 (npm)

The package @zalastax/nolb-f4 was found to contain malicious code...

Malicious code in @zalastax/nolb-f4 (npm)

The package @zalastax/nolb-f4 was found to contain malicious code...

CVE-2024-31925

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FAKTOR VIER F4 Improvements allows Stored XSS.This issue affects F4 Improvements: from n/a through 1.8.0...

CVE-2024-9442

The F4 Improvements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above...

CVE-2021-45841

In Terramaster F4-210, F2-210 TOS 4.2.X 4.2.15-2107141517, an attacker can self-sign session cookies by knowing the target's MAC address and the user's password hash. Guest users disabled by default can be abused using a null/empty hash and allow an unauthenticated attacker to login as guest...

CVE-2025-22499

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FAKTOR VIER F4 Post Tree f4-tree allows Reflected XSS.This issue affects F4 Post Tree: from n/a through = 1.1.18...

CVE-2025-22499

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in FAKTOR VIER F4 Post Tree f4-tree allows Reflected XSS.This issue affects F4 Post Tree: from n/a through = 1.1.18...