EUVD-2025-3517

Malicious code in bioql PyPI...

EUVD-2024-52423

Malicious code in bioql PyPI...

EUVD-2025-19656

Malicious code in bioql PyPI...

EUVD-2023-53670

Malicious code in bioql PyPI...

EUVD-2022-50204

Malicious code in bioql PyPI...

EUVD-2025-7571

Malicious code in bioql PyPI...

EUVD-2024-29794

Malicious code in bioql PyPI...

EUVD-2024-40072

Malicious code in bioql PyPI...

EUVD-2025-3842

Malicious code in bioql PyPI...

EUVD-2023-57742

Malicious code in bioql PyPI...

EUVD-2024-36899

Malicious code in bioql PyPI...

EUVD-2024-20996

Malicious code in bioql PyPI...

EUVD-2023-44794

Malicious code in bioql PyPI...

PT-2025-38932

Name of the Vulnerable Software and Affected Versions NIX Anti-Spam Light versions through 0.0.4 Description The software contains a Cross-Site Request Forgery CSRF flaw. This allows attackers to perform actions on behalf of an authenticated user without their knowledge. Recommendations Update to...

CVE-2025-48350 WordPress AutoWP plugin <= 2.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Basar Ventures AutoWP autowp-ai-content-writer-rewriter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AutoWP: from n/a through = 2.2.7...

JVN#44419726: ZWX-2000CSW2-HN and ZWX-2000CS2-HN vulnerable to use of hard-coded credentials

ZWX-2000CSW2-HN and ZWX-2000CS2-HN provided by ZEXELON CO., LTD. contain the following vulnerability. Use of Hard-coded Credentials CWE-798 CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N Base Score 6.8 CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N Base Score 4.5 CVE-2025-53842 Thi...

Malicious code in bonnet-ltd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90d8066c671e4c70fdd26ffc5ac6d901d34541c2cff4aaaf2c118c977078aec4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5542 Malicious code in bonnet-ltd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90d8066c671e4c70fdd26ffc5ac6d901d34541c2cff4aaaf2c118c977078aec4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

JVN#89505333: Multiple vulnerabilities in Active! mail

Active! mail provided by QUALITIA CO., LTD. contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N Base Score 5.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Base Score 6.1 CVE-2025-52462 Cross-site request...

CVE-2025-34080

The Contec Co.,Ltd. CONPROSYS HMI System CHS is vulnerable to Cross-Site Scripting XSS in the getqsetting.php functionality that could allow reflected execution of scripts in the browser on interaction.This issue affects CONPROSYS HMI System CHS: before 3.7.7...