EUVD-2022-35297

Malicious code in bioql PyPI...

EUVD-2025-3279

Malicious code in bioql PyPI...

EUVD-2025-5604

Malicious code in bioql PyPI...

EUVD-2024-42413

Malicious code in bioql PyPI...

EUVD-2025-17270

Malicious code in bioql PyPI...

EUVD-2022-47971

Malicious code in bioql PyPI...

EUVD-2024-52435

Malicious code in bioql PyPI...

EUVD-2025-22414

Malicious code in bioql PyPI...

EUVD-2023-2729

Malicious code in bioql PyPI...

EUVD-2024-1679

Malicious code in bioql PyPI...

EUVD-2025-16354

Malicious code in bioql PyPI...

EUVD-2022-1380

Malicious code in bioql PyPI...

EUVD-2022-0204

Malicious code in bioql PyPI...

EUVD-2022-4185

Malicious code in bioql PyPI...

CVE-2025-59816 Authenticated Union based SQL-injection in the search input field

This vulnerability allows attackers to directly query the underlying database, potentially retrieving all data stored in the Billing Admin database, including user credentials. User passwords are stored in plaintext, significantly increasing the severity of this issue...

CVE-2025-58227

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Alexander Lueken Podlove Subscribe button podlove-subscribe-button allows Stored XSS.This issue affects Podlove Subscribe button: from n/a through = 1.3.11...

WordPress plugin Appointmind 跨站脚本漏洞

WordPress Appointmind plugin is an online appointment management plugin for WordPress, mainly used to embed the online appointment scheduling feature into posts or sidebars. WordPress Appointmind plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of...

Unspecified Vulnerability in Microsoft Visual Studio Code (CNVD-2025-22193)

Microsoft Visual Studio Code is an open source code editor from Microsoft USA. A security vulnerability exists in Microsoft Visual Studio Code that originates from insufficiently filtered or validated user-supplied data and can be exploited by an attacker to remotely execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2018-8035

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This vulnerability relates to the user's browser processing of DUCC webpage input data.The javascript comprising Apache UIMA DUCC = 2.2.2 which runs in the user...

CVE-2025-58851 WordPress Boxed Content Plugin <= 1.0 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DigitalCourt Boxed Content boxed-content allows Stored XSS.This issue affects Boxed Content: from n/a through = 1.0...