4739 matches found
EUVD-2022-39815
Malicious code in bioql PyPI...
EUVD-2023-56963
Malicious code in bioql PyPI...
EUVD-2024-25882
Malicious code in bioql PyPI...
EUVD-2024-48976
Malicious code in bioql PyPI...
EUVD-2022-3287
Malicious code in bioql PyPI...
EUVD-2022-29672
Malicious code in bioql PyPI...
EUVD-2023-34853
Malicious code in bioql PyPI...
EUVD-2022-46879
Malicious code in bioql PyPI...
EUVD-2022-5086
Malicious code in bioql PyPI...
EUVD-2022-46841
Malicious code in bioql PyPI...
EUVD-2025-9294
Malicious code in bioql PyPI...
EUVD-2021-7779
Malicious code in bioql PyPI...
EUVD-2024-36732
Malicious code in bioql PyPI...
EUVD-2024-49753
Malicious code in bioql PyPI...
EUVD-2022-27589
Malicious code in bioql PyPI...
CVE-2025-60453
A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the column management module, specifically in the app\system\column\admin\index.class.php component. The vulnerability allows attackers to upload malicious SVG files...
CVE-2025-60454
MetInfo CMS 8.0 is affected in the image management module. The XSS vulnerability arises from unvalidated SVG uploads in the file path app\system\img\admin\img_admin.class.php, enabling stored JavaScript execution when users view/access the uploaded SVG. Multiple connected sources corroborate thi...
CVE-2025-59528
Flowise 3.0.5 contains a remote code execution vulnerability in the CustomMCP node. The mcpServerConfig string is parsed and passed to the Function() constructor via convertToValidJSONString without validation, allowing an attacker to execute arbitrary JavaScript with Node.js privileges (e.g., ac...
3DAlloy 跨站脚本漏洞
3DAlloy is a lightweight 3D viewer from the individual developer Maxim Martynov. A cross-site scripting vulnerability exists in 3DAlloy 1.8 and earlier versions, which stems from not cleaning up a custom attribute on the canvas HTML element and could lead to the execution of arbitrary JavaScript...
CVE-2025-53838 LinkAce has a Stored One Click XSS vulnerability
LinkAce is a self-hosted archive to collect website links. A stored cross-site scripting XSS vulnerability was discovered in versions prior to 2.1.9 that allows an attacker to inject arbitrary JavaScript, which is then executed in the context of a user's browser when the malicious link is clicked...