EUVD-2023-58664

Malicious code in bioql PyPI...

EUVD-2025-22998

Malicious code in bioql PyPI...

EUVD-2024-32419

Malicious code in bioql PyPI...

EUVD-2024-22947

Malicious code in bioql PyPI...

EUVD-2023-58662

Malicious code in bioql PyPI...

EUVD-2023-53528

Malicious code in bioql PyPI...

EUVD-2023-58668

Malicious code in bioql PyPI...

EUVD-2023-58672

Malicious code in bioql PyPI...

EUVD-2023-58670

Malicious code in bioql PyPI...

EUVD-2022-15824

Malicious code in bioql PyPI...

EUVD-2023-58659

Malicious code in bioql PyPI...

EUVD-2023-58663

Malicious code in bioql PyPI...

EUVD-2023-58665

Malicious code in bioql PyPI...

EUVD-2023-58666

Malicious code in bioql PyPI...

EUVD-2023-58667

Malicious code in bioql PyPI...

EUVD-2023-58671

Malicious code in bioql PyPI...

CVE-2025-56154

htmly v3.0.8 is vulnerable to Cross Site Scripting XSS in the /author/:name endpoint of the affected application. The name parameter is not properly sanitized before being reflected in the HTML response, allowing attackers to inject arbitrary JavaScript payloads...

CVE-2025-56154

htmly v3.0.8 is vulnerable to Cross Site Scripting XSS in the /author/:name endpoint of the affected application. The name parameter is not properly sanitized before being reflected in the HTML response, allowing attackers to inject arbitrary JavaScript payloads...

CVE-2025-52203

A stored cross-site scripting XSS vulnerability exists in DevaslanPHP project-management v1.2.4. The vulnerability resides in the Ticket Name field, which fails to properly sanitize user-supplied input. An authenticated attacker can inject malicious JavaScript payloads into this field, which are...

CVE-2025-52203

Summary: CVE-2025-52203 affects DevaslanPHP project-management v1.2.4 with a stored XSS in the Ticket Name field. An authenticated attacker can inject JavaScript, which is stored in the database and executes in a user’s browser context when they log in and are redirected to the Dashboard. The iss...