EUVD-2018-8328

Malware in sbrugna...

EUVD-2025-18182

Malicious code in bioql PyPI...

CVE-2025-49191

Linked URLs during the creation of iFrame widgets and dashboards are vulnerable to code execution. The URLs get embedded as iFrame widgets, making it possible to attack other users that access the dashboard by including malicious code. The attack is only possible if the attacker is authorized to...

CVE-2025-49191

CVE-2025-49191 describes code execution via linked URLs embedded when creating iFrame widgets and dashboards. The vulnerability affects dashboards/iFrame widget creation where attacker-supplied URLs are embedded, enabling code execution when other users load the affected dashboard. Exploitation r...

CVE-2025-49191: Improper Restriction of Rendered UI Layers or Frames

Linked URLs during the creation of iFrame widgets and dashboards are vulnerable to code execution. The URLs get embedded as iFrame widgets, making it possible to attack other users that access the dashboard by including malicious code. The attack is only possible if the attacker is authorized to...

CVE-2018-16519

COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting XSS via URLs used by "iFrame" widgets...

CVE-2018-16519: Improper Neutralization of Input During Web Page Generation

COYO 9.0.8, 10.0.11 and 12.0.4 has cross-site scripting XSS via URLs used by "iFrame" widgets...

PT-2019-9316

Name of the Vulnerable Software and Affected Versions COYO versions 9.0.8, 10.0.11, 12.0.4 Description The issue is related to cross-site scripting XSS that occurs via URLs used by "iFrame" widgets. Recommendations For version 9.0.8, update to a version that includes a fix for this issue. For...