EUVD-2025-19846

Malicious code in bioql PyPI...

EUVD-2023-1360

Malicious code in bioql PyPI...

EUVD-2022-4251

Malicious code in bioql PyPI...

EUVD-2025-14012

Malicious code in bioql PyPI...

EUVD-2022-27095

Malicious code in bioql PyPI...

EUVD-2022-36212

Malicious code in bioql PyPI...

EUVD-2024-47776

Malicious code in bioql PyPI...

EUVD-2022-27476

Malicious code in bioql PyPI...

EUVD-2022-29911

Malicious code in bioql PyPI...

EUVD-2022-4827

Malicious code in bioql PyPI...

EUVD-2024-36214

Malicious code in bioql PyPI...

CVE-2025-57424

A stored cross-site scripting XSS vulnerability exists in the MyCourts v3 application within the LTA number profile field. An attacker can insert arbitrary JavaScript into their profile, which executes in the browser of any user viewing it, including administrators. Due to the absence of the...

PT-2025-39175

Name of the Vulnerable Software and Affected Versions WSO2 products affected versions not specified Description An authenticated stored cross-site scripting XSS issue exists because of insufficient validation of user-provided input when uploading API documents within the Publisher portal. An...

Linux Distros Unpatched Vulnerability : CVE-2023-4639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Undertow, which incorrectly parses cookies with certain value-delimiting characters in incoming requests. This issue could allow an attacker...

Linux Distros Unpatched Vulnerability : CVE-2015-2156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow...

Digisol DG-GR6821AC Router 安全漏洞

Digisol DG-GR6821AC Router is a WiFi router from Digisol India. A security vulnerability exists in the Digisol DG-GR6821AC Router, which stems from the session cookie not being configured with the Secure and HttpOnly flags, which could lead to a remote attacker obtaining sensitive information...

Unspecified Vulnerability in Endress+Hauser MEAC300-FNADE4 (CNVD-2025-16350)

The Endress+Hauser MEAC300-FNADE4 is a cost-effective emissions data management computer from Endress+Hauser Vietnam. A security vulnerability exists in the Endress+Hauser MEAC300-FNADE4 that stems from the HttpOnly flag not being set, which can be exploited by an attacker to cause session...

CVE-2025-27453

The HttpOnly flag is set to false on the PHPSESSION cookie. Therefore, the cookie can be accessed by other sources such as JavaScript...

CVE-2025-27453

The HttpOnly flag is set to false on the PHPSESSION cookie. Therefore, the cookie can be accessed by other sources such as JavaScript...

CVE-2025-27453

The HttpOnly flag is set to false on the PHPSESSION cookie. Therefore, the cookie can be accessed by other sources such as JavaScript...