EUVD-2024-33501

Malicious code in bioql PyPI...

EUVD-2021-29808

Malicious code in bioql PyPI...

EUVD-2025-26719

Malicious code in bioql PyPI...

EUVD-2025-31772

Malicious code in bioql PyPI...

EUVD-2022-25846

Malicious code in bioql PyPI...

EUVD-2025-23892

Malicious code in bioql PyPI...

EUVD-2023-40989

Malicious code in bioql PyPI...

EUVD-2025-27209

Malicious code in bioql PyPI...

CVE-2025-40647 Stored Cross-Site Scripting (XSS) vulnerability in Issabel products

Stored Cross-Site Scripting XSS vulnerability in Issabel v5.0.0, consisting of a stored XSS due to a lack of proper validation of user input, through the 'email' parameter in '/index.php?menu=addressbook'...

PT-2025-40025

Name of the Vulnerable Software and Affected Versions MegaSys Telenium Online Web Application affected versions not specified Description The Telenium Online Web Application contains a critical command injection flaw stemming from an insecurely terminated regular expression check within a PHP...

CVE-2025-36245 IBM InfoSphere Information Server command execution

IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input...

The vulnerability of the openvswitch component in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the openvswitch component in the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-57981

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in catchsquare WP Social Widget allows Stored XSS. This issue affects WP Social Widget: from n/a through 2.3.1...

IBM Watsonx.data 操作系统命令注入漏洞

IBM Watsonx.data is an open data lake warehouse platform from International Business Machines IBM. An operating system command injection vulnerability exists in IBM Watsonx.data version 2.2 that stems from not properly validating user input and can be exploited by an attacker to cause a privilege...

appRain CMF cross-site scripting vulnerability (CNVD-2025-21112)

appRain CMF is a content management framework. A cross-site scripting vulnerability exists in appRain CMF, which is caused by improper validation of user input by the /apprain/developer/addons/update/ace endpoint. An attacker could use this vulnerability to steal the victim's cookie-based...

CVE-2025-41047

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/ace...

CVE-2025-48538

A local denial of service vulnerability exists in the Google Android operating system due to improper input validation in the setApplicationHiddenSettingAsUser() function within the PackageManagerService.java module. An attacker can exploit this flaw to hide system-critical packages, potentially ...

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2025-19502)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Odobie Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A...

Tenda AC20 Buffer Overflow Vulnerability (CNVD-2025-19581)

The Tenda AC20 is a wireless router from the Chinese company Tenda. The Tenda AC20 suffers from a buffer overflow vulnerability that originates from the failure of the sub48E628 function parameter list in the /goform/SetIpMacBind file to properly validate the length of the input data, which can b...

Tenda CH22 Buffer Overflow Vulnerability

The Tenda CH22 is an enterprise-grade wireless router from the Tenda brand. Tenda CH22 suffers from a buffer overflow vulnerability, which originates from the failure of the formdelFileName function in the file /goform/delFileName to properly validate the length and size of the input data, which...