EUVD-2023-29417

Malicious code in bioql PyPI...

EUVD-2022-6493

Malicious code in bioql PyPI...

EUVD-2023-31024

Malicious code in bioql PyPI...

EUVD-2025-31236

Malicious code in bioql PyPI...

EUVD-2022-2942

Malicious code in bioql PyPI...

EUVD-2021-31710

Malicious code in bioql PyPI...

CVE-2025-60170

Cross-Site Request Forgery CSRF vulnerability in Taraprasad Swain HTACCESS IP Blocker htaccess-ip-blocker allows Stored XSS.This issue affects HTACCESS IP Blocker: from n/a through = 1.0...

WordPress HTACCESS IP Blocker Plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin HTACCESS IP Blocker versions = 1.0...

CVE-2025-60170

Cross-Site Request Forgery CSRF vulnerability in Taraprasad Swain HTACCESS IP Blocker htaccess-ip-blocker allows Stored XSS.This issue affects HTACCESS IP Blocker: from n/a through = 1.0...

CVE-2025-60170

CVE-2025-60170 refers to HTACCESS IP Blocker (WordPress plugin). Connected sources confirm the entry exists and note vulnerability type as Cross-Site Request Forgery (CSRF) with the patch status shown as Unpatched in the Wordfence vulnerability digest. The initial description attributes a CSRF co...

CVE-2025-60170 WordPress HTACCESS IP Blocker Plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Taraprasad Swain HTACCESS IP Blocker htaccess-ip-blocker allows Stored XSS.This issue affects HTACCESS IP Blocker: from n/a through = 1.0...

CVE-2025-60170 WordPress HTACCESS IP Blocker Plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Taraprasad Swain HTACCESS IP Blocker htaccess-ip-blocker allows Stored XSS.This issue affects HTACCESS IP Blocker: from n/a through = 1.0...

CVE-2025-60170: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Taraprasad Swain HTACCESS IP Blocker htaccess-ip-blocker allows Stored XSS.This issue affects HTACCESS IP Blocker: from n/a through = 1.0...

WordPress plugin HTACCESS IP Blocker 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site reque...

Linux Distros Unpatched Vulnerability : CVE-2020-14209

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr before 11.0.5 allows low-privilege users to upload files of dangerous types, leading to arbitrary code execution. This occurs because .pht and .phar...

Linux Distros Unpatched Vulnerability : CVE-2020-15175

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In GLPI before version 9.5.2, the pluginimage.send.php endpoint allows a user to specify an image from a plugin. The parameters can be maliciously crafted to...

CVE-2025-48732

An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can request a .phar file to trigger this vulnerability...

PT-2025-30679 · Wwbn · Avideo

Name of the Vulnerable Software and Affected Versions: WWBN AVideo version 14.4 WWBN AVideo dev master commit 8a8954ff Description: An incomplete blacklist in the .htaccess sample allows for arbitrary code execution via a specially crafted HTTP request. An attacker can request a .phar file to...

CVE-2025-48732: Incomplete List of Disallowed Inputs

An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to a arbitrary code execution. An attacker can request a .phar file to trigger this vulnerability...

CVE-2025-48488 FreeScout Vulnerable to Stored XSS

FreeScout is a free self-hosted help desk and shared mailbox. Prior to version 1.8.180, deleting the file .htaccess allows an attacker to upload an HTML file containing malicious JavaScript code to the server, which can result in a Cross-Site Scripting XSS vulnerability. This issue has been patch...