EUVD-2025-16030

Malicious code in bioql PyPI...

EUVD-2025-16029

Malicious code in bioql PyPI...

CVE-2025-9573 Command Injection in extension "TYPO3 Backup Plus" (ns_backup)

The nsbackup extension through 13.0.2 for TYPO3 allows command injection...

CVE-2025-48204

The nsbackup extension through 13.0.0 for TYPO3 allows command injection...

CVE-2025-48206

The nsbackup extension through 13.0.0 for TYPO3 allows XSS...

CVE-2025-48206

The nsbackup extension through 13.0.0 for TYPO3 allows XSS...

CVE-2025-48206

The nsbackup extension through 13.0.0 for TYPO3 allows XSS...

CVE-2025-48201

The CVE-2025-48201 entry concerns the TYPO3 ns_backup (Backup Plus) extension up to version 13.0.0, which exposes a Predictable Resource Location. The vulnerability allows an unauthenticated remote user to download created backups and configuration files, due to predictable resource paths. Affect...

CVE-2025-48201

The nsbackup extension through 13.0.0 for TYPO3 has a Predictable Resource Location...

CVE-2025-48206

The nsbackup extension through 13.0.0 for TYPO3 allows XSS...

CVE-2025-48204

The nsbackup extension through 13.0.0 for TYPO3 allows command injection...

CVE-2025-48204

The nsbackup extension through 13.0.0 for TYPO3 allows command injection...

CVE-2025-48206

The ns_backup (Backup Plus) extension for TYPO3 is vulnerable to Cross-Site Scripting (XSS) in versions up to and including 13.0.0 . The root cause is improper input sanitization , which allows an attacker to inject malicious scripts by submitting crafted input. Successful exploitation could allo...