EUVD-2014-2181

Malware in sbrugna...

EUVD-2004-1429

Malware in sbrugna...

EUVD-2020-4389

Malware in sbrugna...

EUVD-2012-4145

Malware in sbrugna...

CVE-2025-11308 Vanderlande Baggage 360 messages cross site scripting

A vulnerability was identified in Vanderlande Baggage 360 7.0.0. This issue affects some unknown processing of the file /api-addons/v1/messages. Such manipulation of the argument Message leads to cross site scripting. The attack may be performed from remote. The exploit is publicly available and...

EUVD-2024-25168

Malicious code in bioql PyPI...

EUVD-2022-44758

Malicious code in bioql PyPI...

EUVD-2023-37016

Malicious code in bioql PyPI...

EUVD-2023-53700

Malicious code in bioql PyPI...

EUVD-2023-30040

Malicious code in bioql PyPI...

EUVD-2023-30041

Malicious code in bioql PyPI...

EUVD-2023-45157

Malicious code in bioql PyPI...

EUVD-2023-30042

Malicious code in bioql PyPI...

EUVD-2023-37015

Malicious code in bioql PyPI...

EUVD-2022-52427

Malicious code in bioql PyPI...

EUVD-2024-36524

Malicious code in bioql PyPI...

EUVD-2024-35439

Malicious code in bioql PyPI...

EUVD-2025-11293

Malicious code in bioql PyPI...

CVE-2025-8564

CVE-2025-8564 — Stored Cross‑Site Scripting in SKT Addons for Elementor (WordPress) up to version 3.7 due to insufficient input sanitization and output escaping on user attributes. Exploitation requires authenticated access at contributor level or higher; attacker can inject scripts that execute ...

Beyond the Scope: Security Testing of Permission Management in Team Workspace

Nowadays team workspaces are widely adopted for multi-user collaboration and digital resource management. To further broaden real-world applications, mainstream team workspaces platforms, such as Google Workspace and Microsoft OneDrive, allow third-party applications referred to as add-ons to be...