EUVD-2025-7136

Malicious code in bioql PyPI...

EUVD-2025-7132

Malicious code in bioql PyPI...

CVE-2025-29412

A cross-site scripting XSS vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...

CVE-2025-29411

An arbitrary file upload vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2025-29411

An arbitrary file upload vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2025-29411

An arbitrary file upload vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2025-29412

A cross-site scripting XSS vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...

CVE-2025-29412

A cross-site scripting XSS vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...

iBanking 安全漏洞

iBanking is an information system by Martin Mbithi, an individual developer. A security vulnerability exists in iBanking version v2.0.0, which originates from a cross-site scripting vulnerability in the update section of the client configuration file, which allows an attacker to execute arbitrary...

CVE-2025-29412

A cross-site scripting XSS vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...

CVE-2025-29412: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...

CVE-2025-29411

An arbitrary file upload vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

CVE-2025-29412

A cross-site scripting XSS vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...

CVE-2025-29411

Mart Developers iBanking v2.0.0 contains an arbitrary file upload vulnerability within the Client Profile Update section. This flaw allows an attacker to upload a crafted PHP file , leading to arbitrary code execution on the host system. The impact includes potential unauthorized access or full s...

CVE-2025-29411: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

iBanking 安全漏洞

iBanking is an information system by Martin Mbithi Personal Developer. A security vulnerability exists in iBanking version v2.0.0, which stems from an arbitrary file upload vulnerability in the Client Profile Update section that could lead to the execution of arbitrary code...

CVE-2025-29412

A cross-site scripting (XSS) vulnerability exists in the Client Profile Update section of Mart Developers iBanking v2.0.0 . The flaw allows an attacker to execute arbitrary web scripts or HTML by injecting a crafted payload into the Name parameter. To mitigate this risk, it is recommended to disa...

CVE-2025-29411

An arbitrary file upload vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary code via uploading a crafted PHP file...

Malicious code in ibanking-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7804c7704b112de8ffcb7e68e999a0f477e2baa0505178ef60f680b7ef3ee7ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3746 Malicious code in ibanking-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7804c7704b112de8ffcb7e68e999a0f477e2baa0505178ef60f680b7ef3ee7ab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...