EUVD-2024-17984

Malicious code in bioql PyPI...

EUVD-2023-54076

Malicious code in bioql PyPI...

EUVD-2024-35238

Malicious code in bioql PyPI...

EUVD-2024-46118

Malicious code in bioql PyPI...

EUVD-2023-37791

Malicious code in bioql PyPI...

EUVD-2023-53810

Malicious code in bioql PyPI...

EUVD-2023-54197

Malicious code in bioql PyPI...

EUVD-2025-24544

Malicious code in bioql PyPI...

EUVD-2022-26052

Malicious code in bioql PyPI...

EUVD-2024-52020

Malicious code in bioql PyPI...

EUVD-2022-26704

Malicious code in bioql PyPI...

EUVD-2023-56421

Malicious code in bioql PyPI...

EUVD-2025-22108

Malicious code in bioql PyPI...

EUVD-2023-54208

Malicious code in bioql PyPI...

EUVD-2022-36248

Malicious code in bioql PyPI...

CVE-2025-54292

CVE-2025-54292 concerns a path traversal vulnerability in Canonical’s LXD/LXD-UI prior to versions 6.5 and 5.21.4. The accessible details in the provided documents indicate that an authenticated remote attacker could abuse crafted resource names in URL paths to access or modify unintended resourc...

CVE-2025-20361 Cisco Unified Communications Manager Stored Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of...

Ruckus Wireless ICX Switches Cross-site Scripting and Cross-site Request Forgery (CVE-2023-39905)

A vulnerability in the web-based management interface of the RUCKUS ICX product line could allow a remote attacker to execute XSS and CSRF attacks against the user of the interface. To exploit this vulnerability, an attacker would require the targeted user to click a crafted link that would send ...

Security Bulletin: TS4500 Tape Library/Diamondback Tape Library addresses security vulnerability CVE-2025-36088

Summary The web GUI did not sufficiently sanitize user input in certain dialogs, allowing HTML or JavaScript to be stored and later displayed to other users. Malicious code would only execute if a user opened the affected event entry. The issue has been resolved by adding proper input sanitizatio...

CVE-2025-9495 Viessmann Vitogate 300 Authentication Bypass

The Vitogate 300 web interface fails to enforce proper server-side authentication and relies on frontend-based authentication controls. This allows an attacker to simply modify HTML elements in the browser’s developer tools to bypass login restrictions. By removing specific UI elements, an attack...