EUVD-2025-12701

Malicious code in bioql PyPI...

EUVD-2024-17614

Malicious code in bioql PyPI...

EUVD-2023-50146

Malicious code in bioql PyPI...

EUVD-2024-47631

Malicious code in bioql PyPI...

EUVD-2022-39478

Malicious code in bioql PyPI...

EUVD-2024-37373

Malicious code in bioql PyPI...

EUVD-2024-44047

Malicious code in bioql PyPI...

EUVD-2023-46639

Malicious code in bioql PyPI...

EUVD-2023-49832

Malicious code in bioql PyPI...

EUVD-2023-49513

Malicious code in bioql PyPI...

EUVD-2024-42868

Malicious code in bioql PyPI...

EUVD-2025-23868

Malicious code in bioql PyPI...

CVE-2025-51053

A Cross-site scripting XSS vulnerability in /apivedo/ in Vedo Suite version 2024.17 allows remote attackers to inject arbitrary Javascript or HTML code and potentially trigger code execution in victim's browser...

CVE-2025-50740

AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting xss vulnerability. The AutoConnect web interface /ac/config allows HTML/JS code to be executed via a crafted network SSID...

CVE-2025-51053

A Cross-site scripting XSS vulnerability in /apivedo/ in Vedo Suite version 2024.17 allows remote attackers to inject arbitrary Javascript or HTML code and potentially trigger code execution in victim's browser...

PT-2025-29525 · Racoon · Dracoon Branding Service

Name of the Vulnerable Software and Affected Versions: DRACOON Branding Service versions prior to 2.10.0 Description: DRACOON is a file sharing service, and the DRACOON Branding Service allows customers to customize their DRACOON interface. Versions prior to 2.10.0 are susceptible to cross-site...

CVE-2023-38007 IBM Cloud Pak System HTML injection

IBM Cloud Pak System 2.3.5.0, 2.3.3.7, 2.3.3.7 iFix1 on Power and 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.4.0, 2.3.4.1 on Intel operating systems is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browse...

CVE-2025-1985

Due to improper neutralization of input during web page generation XSS an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device...

CVE-2025-1985

Due to improper neutralization of input during web page generation XSS an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device...

CVE-2025-1985

CVE-2025-1985 matches the Pepperl+Fuchs Profinet Gateway LB8122A.1.EL / FB8122A.1.EL family. The issue is an XSS due to improper neutralization of input during web page generation, allowing an unauthenticated remote attacker to inject HTML into the Web-UI of the affected device. Documented in mul...