EUVD-2021-9089

Malicious code in bioql PyPI...

EUVD-2023-34824

Malicious code in bioql PyPI...

EUVD-2021-33072

Malicious code in bioql PyPI...

EUVD-2023-29071

Malicious code in bioql PyPI...

EUVD-2025-6855

Malicious code in bioql PyPI...

EUVD-2023-29068

Malicious code in bioql PyPI...

EUVD-2022-36248

Malicious code in bioql PyPI...

EUVD-2022-7426

Malicious code in bioql PyPI...

EUVD-2022-3999

Malicious code in bioql PyPI...

EUVD-2024-18050

Malicious code in bioql PyPI...

EUVD-2021-6880

Malicious code in bioql PyPI...

EUVD-2025-12707

Malicious code in bioql PyPI...

EUVD-2021-6821

Malicious code in bioql PyPI...

EUVD-2021-6760

Malicious code in bioql PyPI...

EUVD-2022-36196

Malicious code in bioql PyPI...

Cisco Identity Services Engine (cisco-sa-ise_xss_acc_cont-YsR4uT4U)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to modify parts of the configuration on an affected device. This vulnerability is due to the lack of...

CVE-2025-36548

A cross-site scripting xss vulnerability exists in the LoginWordPress loginForm cancelUri parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigg...

WWBN AVideo .htaccess sample incomplete blacklist vulnerability

Talos Vulnerability Report TALOS-2025-2213 WWBN AVideo .htaccess sample incomplete blacklist vulnerability July 24, 2025 CVE Number CVE-2025-48732 SUMMARY An incomplete blacklist exists in the .htaccess sample of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request ca...

CVE-2025-46002

An issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP request to the filemanager.php endpoint...

GHSA-R7Q6-6FMQ-MX4C Filemanager is vulnerable to Relative Path Traversal through filemanager.php

An issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP request to the filemanager.php endpoint...