EUVD-2025-12701

Malicious code in bioql PyPI...

EUVD-2023-46639

Malicious code in bioql PyPI...

EUVD-2023-49513

Malicious code in bioql PyPI...

EUVD-2024-37373

Malicious code in bioql PyPI...

EUVD-2024-42868

Malicious code in bioql PyPI...

EUVD-2024-47631

Malicious code in bioql PyPI...

EUVD-2024-19450

Malicious code in bioql PyPI...

EUVD-2022-0785

Malicious code in bioql PyPI...

EUVD-2025-23868

Malicious code in bioql PyPI...

EUVD-2024-39151

Malicious code in bioql PyPI...

EUVD-2022-39478

Malicious code in bioql PyPI...

EUVD-2024-44047

Malicious code in bioql PyPI...

EUVD-2024-17614

Malicious code in bioql PyPI...

CVE-2025-51053

A Cross-site scripting XSS vulnerability in /apivedo/ in Vedo Suite version 2024.17 allows remote attackers to inject arbitrary Javascript or HTML code and potentially trigger code execution in victim's browser...

CVE-2025-50740

AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting xss vulnerability. The AutoConnect web interface /ac/config allows HTML/JS code to be executed via a crafted network SSID...

CVE-2025-51053

A Cross-site scripting XSS vulnerability in /apivedo/ in Vedo Suite version 2024.17 allows remote attackers to inject arbitrary Javascript or HTML code and potentially trigger code execution in victim's browser...

PT-2025-29525 · Racoon · Dracoon Branding Service

Name of the Vulnerable Software and Affected Versions: DRACOON Branding Service versions prior to 2.10.0 Description: DRACOON is a file sharing service, and the DRACOON Branding Service allows customers to customize their DRACOON interface. Versions prior to 2.10.0 are susceptible to cross-site...

CVE-2023-38007 IBM Cloud Pak System HTML injection

IBM Cloud Pak System 2.3.5.0, 2.3.3.7, 2.3.3.7 iFix1 on Power and 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.4.0, 2.3.4.1 on Intel operating systems is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browse...

The vulnerability in the web interface of the risk management platforms IBM OpenPages and IBM OpenPages with Watson allows a hacker to execute arbitrary HTML code.

The vulnerability of the web interface of IBM OpenPages and IBM OpenPages with Watson relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary HTML code remotely...

CVE-2025-1985

Due to improper neutralization of input during web page generation XSS an unauthenticated remote attacker can inject HTML code into the Web-UI in the affected device...