EUVD-2025-32031

Malicious code in bioql PyPI...

CVE-2025-56515

The Fiora chat application (version 1.0.0 ) is vulnerable to a Cross-Site Scripting (XSS) attack via a file upload vulnerability in the user avatar upload functionality . The application fails to properly validate the content of uploaded SVG files , allowing attackers to store malicious files con...

CVE-2025-56515

File upload vulnerability in Fiora chat application 1.0.0 through user avatar upload functionality. The application fails to validate SVG file content, allowing malicious SVG files with embedded foreignObject elements containing iframe tags and JavaScript event handlers onmouseover to be uploaded...