13 matches found
EUVD-2025-16029
Malicious code in bioql PyPI...
EUVD-2025-16030
Malicious code in bioql PyPI...
CVE-2025-9573 Command Injection in extension "TYPO3 Backup Plus" (ns_backup)
The nsbackup extension through 13.0.2 for TYPO3 allows command injection...
CVE-2025-48204
The nsbackup extension through 13.0.0 for TYPO3 allows command injection...
CVE-2025-48206
The nsbackup extension through 13.0.0 for TYPO3 allows XSS...
CVE-2025-48206
The nsbackup extension through 13.0.0 for TYPO3 allows XSS...
CVE-2025-48206
The nsbackup extension through 13.0.0 for TYPO3 allows XSS...
CVE-2025-48206
The nsbackup extension through 13.0.0 for TYPO3 allows XSS...
CVE-2025-48204
The nsbackup extension through 13.0.0 for TYPO3 allows command injection...
CVE-2025-48206
The ns_backup (Backup Plus) extension for TYPO3 is vulnerable to Cross-Site Scripting (XSS) in versions up to and including 13.0.0 . The root cause is improper input sanitization , which allows an attacker to inject malicious scripts by submitting crafted input. Successful exploitation could allo...
CVE-2025-48201
The CVE-2025-48201 entry concerns the TYPO3 ns_backup (Backup Plus) extension up to version 13.0.0, which exposes a Predictable Resource Location. The vulnerability allows an unauthenticated remote user to download created backups and configuration files, due to predictable resource paths. Affect...