EUVD-2019-7825

Malware in sbrugna...

EUVD-2022-5428

Malicious code in bioql PyPI...

EUVD-2022-7079

Malicious code in bioql PyPI...

CVE-2020-36395

A stored cross site scripting XSS vulnerability in the /admin/user/team component of LavaLite 5.8.0 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "New" parameter...

CVE-2022-42188

In Lavalite 9.0.0, the XSRF-TOKEN cookie is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server...

LavaLite Cross-Site Scripting Vulnerability (CNVD-2021-48516)

Lavalite is an open source content management system developed using the Laravel framework. A stored cross-site scripting vulnerability exists in the /admin/contact/contact component of LavaLite version 5.8.0, which can be exploited by an attacker to execute arbitrary Web script or HTML via the...