EUVD-2023-59124

Malicious code in bioql PyPI...

EUVD-2025-10393

Malicious code in bioql PyPI...

EUVD-2023-59037

Malicious code in bioql PyPI...

EUVD-2024-16844

Malicious code in bioql PyPI...

EUVD-2022-34536

Malicious code in bioql PyPI...

EUVD-2025-1626

Malicious code in bioql PyPI...

EUVD-2024-33609

Malicious code in bioql PyPI...

EUVD-2025-32220

Malicious code in bioql PyPI...

EUVD-2025-32219

Malicious code in bioql PyPI...

EUVD-2024-18074

Malicious code in bioql PyPI...

EUVD-2025-14370

Malicious code in bioql PyPI...

EUVD-2024-32979

Malicious code in bioql PyPI...

EUVD-2022-25245

Malicious code in bioql PyPI...

EUVD-2025-21200

Malicious code in bioql PyPI...

EUVD-2024-47212

Malicious code in bioql PyPI...

EUVD-2024-31821

Malicious code in bioql PyPI...

EUVD-2025-6153

Malicious code in bioql PyPI...

CVE-2025-60448

A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists due to insufficient validation of SVG file uploads in the /admin/media.php component, allowing attackers to upload malicious SVG files containing JavaScript code that executes when th...

CVE-2025-9212 WP Dispatcher <= 1.2.0 - Authenticated (Subscriber+) Arbitrary File Upload

The WP Dispatcher plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the wpdispatcherprocessupload function in all versions up to, and including, 1.2.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to...

CVE-2025-9561

CVE-2025-9561 affects the WordPress AP Background plugin (versions 3.8.1–3.8.2). The issue is an arbitrary file upload vulnerability due to missing authorization and insufficient file validation in advParallaxBackAdminSaveSlider(), allowing authenticated attackers with Subscriber+ access to uploa...