EUVD-2025-31598

Malicious code in bioql PyPI...

EUVD-2023-12112

Malicious code in bioql PyPI...

EUVD-2023-54419

Malicious code in bioql PyPI...

EUVD-2023-58657

Malicious code in bioql PyPI...

EUVD-2024-27043

Malicious code in bioql PyPI...

EUVD-2024-16113

Malicious code in bioql PyPI...

EUVD-2023-59001

Malicious code in bioql PyPI...

EUVD-2024-15810

Malicious code in bioql PyPI...

EUVD-2021-8664

Malicious code in bioql PyPI...

EUVD-2023-0295

Malicious code in bioql PyPI...

EUVD-2024-34556

Malicious code in bioql PyPI...

EUVD-2022-4016

Malicious code in bioql PyPI...

EUVD-2022-4929

Malicious code in bioql PyPI...

CVE-2025-56807

A cross-site scripting XSS vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaScript payload using the file explorer in the admin dashboard when creating new folders...

FairSketch RISE Ultimate Project Manager 安全漏洞

FairSketch RISE Ultimate Project Manager is a project management system from FairSketch, Inc. A security vulnerability exists in FairSketch RISE Ultimate Project Manager version 3.9.4, which originates from a JavaScript payload that can be stored by an administrator via File Explorer when creatin...

CVE-2025-57203

MagicProject AI version 9.1 is affected by a Cross-Site Scripting XSS vulnerability within the chatbot generation feature available to authenticated admin users. The vulnerability resides in the prompt parameter submitted to the /dashboard/user/generator/generate-stream endpoint via a...

CVE-2025-50975

IPFire 2.29 web-based firewall interface firewall.cgi fails to sanitize several rule parameters such as PROT, SRCPORT, TGTPORT, dnatport, key, ruleremark, srcaddr, stdnettgt, and tgtaddr, allowing an authenticated administrator to inject persistent JavaScript. This stored XSS payload is executed...

Linux Distros Unpatched Vulnerability : CVE-2021-26247

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - As an unauthenticated remote user, visit http:///authchangepassword.php?ref=alert1 to successfully execute the JavaScript payload present in the ref URL...

CVE-2025-51487

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article...

CVE-2025-51487

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.5, allowing to execute arbitrary JavaScript by using "javascript:" payload, instead of the expected HTTPS protocol, in the CutCode Link parameter when creating/updating a new Article...