54 matches found
EUVD-2023-23429
Malicious code in bioql PyPI...
EUVD-2024-32589
Malicious code in bioql PyPI...
EUVD-2023-23393
Malicious code in bioql PyPI...
EUVD-2022-51937
Malicious code in bioql PyPI...
EUVD-2023-23431
Malicious code in bioql PyPI...
EUVD-2023-23394
Malicious code in bioql PyPI...
EUVD-2023-23430
Malicious code in bioql PyPI...
CVE-2023-1146
Cross-site Scripting XSS - Generic in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1148
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1147
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1104
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1106
Cross-site Scripting XSS - Reflected in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-0947
Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1107
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2024-4023
A stored cross-site scripting XSS vulnerability exists in flatpressblog/flatpress version 1.3. When a user uploads a file with a ".xsig" extension and directly accesses this file, the server responds with a Content-type of application/octet-stream, leading to the file being processed as an HTML...
CVE-2024-4023: Improper Neutralization of Input During Web Page Generation
A stored cross-site scripting XSS vulnerability exists in flatpressblog/flatpress version 1.3. When a user uploads a file with a .xsig extension and directly accesses this file, the server responds with a Content-type of application/octet-stream, leading to the file being processed as an HTML fil...
CVE-2023-1147
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2023-1148
Cross-site Scripting XSS - Stored in GitHub repository flatpressblog/flatpress prior to 1.3...
