EUVD-2024-17349

Malicious code in bioql PyPI...

EUVD-2024-26117

Malicious code in bioql PyPI...

EUVD-2025-17387

Malicious code in bioql PyPI...

EUVD-2022-53059

Malicious code in bioql PyPI...

EUVD-2022-29606

Malicious code in bioql PyPI...

EUVD-2024-36757

Malicious code in bioql PyPI...

EUVD-2023-54295

Malicious code in bioql PyPI...

EUVD-2025-25040

Malicious code in bioql PyPI...

EUVD-2025-25617

Malicious code in bioql PyPI...

EUVD-2023-25646

Malicious code in bioql PyPI...

EUVD-2025-28061

Malicious code in bioql PyPI...

EUVD-2025-28161

Malicious code in bioql PyPI...

CVE-2025-0876

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Isin Basi Advertisement Information Technologies Trade Inc. IT's Workif allows Cross-Site Scripting XSS. This issue affects IT's Workif: through 20251003. NOTE: The vendor was contacted earl...

CVE-2025-0876

The CVE-2025-0876 entry describes an XSS vulnerability in IT’s Workif (Isin Basi Advertisement Information Technologies Trade Inc.). The root cause is improper input neutralization during web page generation, affecting Workif versions through 20251003. CVSS 3.1 base score 4.1 (Medium) with networ...

PT-2025-40511

Name of the Vulnerable Software and Affected Versions IT's Workif versions through 20251003 Description The software contains a flaw related to improper handling of user-supplied data during web page creation, potentially leading to Cross-Site Scripting XSS. This could allow an attacker to inject...

Workif 跨站脚本漏洞

Workif is a customer tracking management software from Workif Turkey. A cross-site scripting vulnerability exists in Workif 20251003 and earlier versions, which stems from improper input neutralization and could lead to cross-site scripting attacks...

Security Bulletin: IBM Watson Studio on Cloud Pak for Data is vulnerable to a cross-site scripting vulnerability

Summary Watson Studio on Cloud Pak for Data is vulnerable to cross-site scripting within the Web UI CVE-2025-33116 Vulnerability Details CVEID:CVE-2025-33116 DESCRIPTION: IBM Cloud Pak for Data is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitra...

BIT-GITLAB-2025-9642 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 14.10 before 18.2.7, 18.3 before 18.3.3, and 18.4 before 18.4.1 that could allow an attacker to inject malicious content that may lead to account takeover...

Improper Check or Handling of Exceptional Conditions

Overview Affected versions of this package are vulnerable to Improper Check or Handling of Exceptional Conditions in the /api/webhook endpoint. An attacker can cause the server to crash and disrupt service availability by sending a Bitbucket Server Push event with JSON field repository.links.clon...

CVE-2025-8122

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability...