EUVD-2024-32733

Malicious code in bioql PyPI...

EUVD-2024-23385

Malicious code in bioql PyPI...

EUVD-2024-19967

Malicious code in bioql PyPI...

EUVD-2025-20456

Malicious code in bioql PyPI...

EUVD-2023-32784

Malicious code in bioql PyPI...

EUVD-2024-23352

Malicious code in bioql PyPI...

EUVD-2024-35980

Malicious code in bioql PyPI...

EUVD-2025-19201

Malicious code in bioql PyPI...

EUVD-2024-35989

Malicious code in bioql PyPI...

EUVD-2022-5086

Malicious code in bioql PyPI...

EUVD-2023-0924

Malicious code in bioql PyPI...

EUVD-2024-35982

Malicious code in bioql PyPI...

EUVD-2024-49325

Malicious code in bioql PyPI...

EUVD-2025-1931

Malicious code in bioql PyPI...

CVE-2025-59773: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59528

Flowise 3.0.5 contains a remote code execution vulnerability in the CustomMCP node. The mcpServerConfig string is parsed and passed to the Function() constructor via convertToValidJSONString without validation, allowing an attacker to execute arbitrary JavaScript with Node.js privileges (e.g., ac...

CVE-2025-58064: Improper Neutralization of Input During Web Page Generation

CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. ckeditor5 and ckeditor5-clipboard versions 46.0.0 through 46.0.2 and 44.2.0 through 45.2.1 contain a Cross-Site Scripting XSS vulnerability. Ability to exploit could be triggered by a specific user action leading to...

CVE-2025-32430

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-3 through 16.4.7, 16.5.0-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, two templates contain reflected XSS vulnerabilities, allowing an attacker to execute...

CVE-2025-32731

A reflected cross-site scripting xss vulnerability exists in the radiationDoseReport.php functionality of meddream MedDream PACS Premium 7.3.5.860. A specially crafted malicious url can lead to arbitrary javascript code execution. An attacker can provide a crafted URL to trigger this vulnerabilit...

AlmaLinux 9 : thunderbird (ALSA-2025:12187)

The remote AlmaLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2025:12187 advisory. firefox: thunderbird: Large branch table could lead to truncated instruction CVE-2025-8028 firefox: thunderbird: Memory safety bugs CVE-2025-8035 firefox...