EUVD-2023-52557

Malicious code in bioql PyPI...

EUVD-2024-35930

Malicious code in bioql PyPI...

EUVD-2024-23363

Malicious code in bioql PyPI...

EUVD-2025-19934

Malicious code in bioql PyPI...

EUVD-2024-46165

Malicious code in bioql PyPI...

EUVD-2025-17963

Malicious code in bioql PyPI...

EUVD-2024-23353

Malicious code in bioql PyPI...

EUVD-2024-40692

Malicious code in bioql PyPI...

EUVD-2024-35926

Malicious code in bioql PyPI...

EUVD-2025-17996

Malicious code in bioql PyPI...

EUVD-2023-52568

Malicious code in bioql PyPI...

EUVD-2024-35921

Malicious code in bioql PyPI...

EUVD-2025-18015

Malicious code in bioql PyPI...

EUVD-2023-52615

Malicious code in bioql PyPI...

EUVD-2022-0633

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the rich text field in web content articles. An attacker can execute arbitrary web scripts or inject malicious HTML by submitting crafted input to this field. Details Cross-site scripting or XSS is a code...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Publisher portal. An attacker can execute arbitrary JavaScript in the context of another user's browser by uploading a crafted API document containing malicious scripts. This can lead to unauthorized UI...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Publisher portal. An attacker can execute arbitrary JavaScript in the context of another user's browser by uploading a crafted API document containing malicious scripts. This can lead to unauthorized UI...

CVE-2025-1131 Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation

A local privilege escalation vulnerability exists in the safeasterisk script included with the Asterisk toolkit package. When Asterisk is started via this script common in SysV init or FreePBX environments, it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating...

U.S. Dept Of Defense: Cross-Site Scripting via URL on ███████

A Cross-Site Scripting XSS vulnerability was discovered on an official domain from the Department of Defense. The vulnerability could be exploited through the GET method, allowing an attacker to inject malicious scripts that could potentially be executed. No further details were provided...