EUVD-2025-16029

Malicious code in bioql PyPI...

EUVD-2025-16030

Malicious code in bioql PyPI...

CVE-2025-9573 Command Injection in extension "TYPO3 Backup Plus" (ns_backup)

The nsbackup extension through 13.0.2 for TYPO3 allows command injection...

CVE-2025-48204

The nsbackup extension through 13.0.0 for TYPO3 allows command injection...

CVE-2025-48206

The nsbackup extension through 13.0.0 for TYPO3 allows XSS...

CVE-2025-48206

The nsbackup extension through 13.0.0 for TYPO3 allows XSS...

CVE-2025-48204

The nsbackup extension through 13.0.0 for TYPO3 allows command injection...

CVE-2025-48201

The nsbackup extension through 13.0.0 for TYPO3 has a Predictable Resource Location...

CVE-2025-48206

The nsbackup extension through 13.0.0 for TYPO3 allows XSS...

CVE-2025-48206

The nsbackup extension through 13.0.0 for TYPO3 allows XSS...

CVE-2025-48204

The nsbackup extension through 13.0.0 for TYPO3 allows command injection...

CVE-2025-48206

The CVE-2025-48206 entry concerns the TYPO3 Backup Plus (ns_backup) extension. Public data confirms an XSS vulnerability in ns_backup up to and including version 13.0.0, caused by improper input handling within the extension. Affected component/file: the ns_backup extension for TYPO3; impact is C...

CVE-2025-48201

The CVE-2025-48201 entry concerns the TYPO3 ns_backup (Backup Plus) extension up to version 13.0.0, which exposes a Predictable Resource Location. The vulnerability allows an unauthenticated remote user to download created backups and configuration files, due to predictable resource paths. Affect...