EUVD-2023-57375

Malicious code in bioql PyPI...

EUVD-2025-12159

Malicious code in bioql PyPI...

EUVD-2025-14316

Malicious code in bioql PyPI...

EUVD-2024-30286

Malicious code in bioql PyPI...

EUVD-2024-49754

Malicious code in bioql PyPI...

EUVD-2025-29619

Malicious code in bioql PyPI...

EUVD-2025-12158

Malicious code in bioql PyPI...

EUVD-2025-12161

Malicious code in bioql PyPI...

EUVD-2024-32917

Malicious code in bioql PyPI...

EUVD-2024-49262

Malicious code in bioql PyPI...

EUVD-2025-12157

Malicious code in bioql PyPI...

EUVD-2023-23999

Malicious code in bioql PyPI...

EUVD-2025-8639

Malicious code in bioql PyPI...

EUVD-2025-23366

Malicious code in bioql PyPI...

CVE-2025-10940 Total.js CMS Layout admin layouts_save cross site scripting

A vulnerability was found in Total.js CMS 1.0.0. Affected by this vulnerability is the function layoutssave of the file /admin/ of the component Layout Page. Performing manipulation of the argument HTML results in cross site scripting. It is possible to initiate the attack remotely. The exploit h...

CVE-2025-8276

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Patika Global Technologies HumanSuite allows...

CVE-2025-8276 HTML Injection in Patika Global Technologies' HumanSuite

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting', Improper Encoding or Escaping of Output, Improper Neutralization of Special Elements in Output Used by a Downstream Component 'Injection' vulnerability in Patika Global Technologies HumanSuite allows...

CVE-2025-8276

CVE-2025-8276 affects Patika Global Technologies’ HumanSuite (prior to 53.21.0). The issue stems from improper encoding/escaping of output and insufficient neutralization of input in web page generation, enabling Cross-Site Scripting (XSS) and injection-style risks (including potential code/data ...

CVE-2025-10117

A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetchtasks.php of the component Add New Task. Executing manipulation with the input alert'XSS' can lead to cross site scripting. The attack can be executed remotely. The...

CVE-2025-9845

A vulnerability has been found in code-projects Fruit Shop Management System 1.0. Affected by this vulnerability is an unknown functionality of the file products.php. Such manipulation of the argument productcode/genname/productname/supplier leads to cross site scripting. It is possible to launch...