EUVD-2022-1831

Malicious code in bioql PyPI...

EUVD-2023-34870

Malicious code in bioql PyPI...

EUVD-2022-7348

Malicious code in bioql PyPI...

EUVD-2022-3628

Malicious code in bioql PyPI...

EUVD-2023-58672

Malicious code in bioql PyPI...

EUVD-2023-58668

Malicious code in bioql PyPI...

EUVD-2022-24744

Malicious code in bioql PyPI...

EUVD-2023-59938

Malicious code in bioql PyPI...

EUVD-2023-58670

Malicious code in bioql PyPI...

EUVD-2022-4061

Malicious code in bioql PyPI...

EUVD-2023-58662

Malicious code in bioql PyPI...

CVE-2025-60447

A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists in the email template configuration component located at /admin/setting.php?action=mail, which allows administrators to input HTML code that is not properly sanitized, leading to...

CVE-2025-60447

A stored Cross-Site Scripting XSS vulnerability has been discovered in Emlog Pro 2.5.19. The vulnerability exists in the email template configuration component located at /admin/setting.php?action=mail, which allows administrators to input HTML code that is not properly sanitized, leading to...

PT-2025-40402

Name of the Vulnerable Software and Affected Versions Vasion Print formerly PrinterLogic Virtual Appliance Host and Application VA/SaaS deployments affected versions not specified Description The software stores a significant number of sensitive credentials, including database passwords, MySQL ro...

CVE-2025-56795

CVE-2025-56795 affects Mealie 3.0.1 and earlier, with a stored XSS in the recipe creation feature. Unsanitized input in the note/text fields of the path “/api/recipes/{recipe_name}” is rendered in the frontend without proper escaping, causing persistent XSS. Root cause: lack of input sanitization...

CVE-2025-20313

Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with physical access to the device to execute persistent code at boot time and break the chain of trust. These vulnerabilities are due path...

Malicious code in @sev-ui-verse/api (npm)

The package @sev-ui-verse/api was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 414d159764ceef8011dcd7e75ef5fbfb99ec42da34486271031460875812f54b Any computer that has this package installed or running should be considered fully...

Malicious code in @sev-ui-verse/snackbar (npm)

The package @sev-ui-verse/snackbar was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f92a070917a547edd5e73a9b1b800cdd1d7e726e1886a712901dc3830d831abe Any computer that has this package installed or running should be considered full...

MAL-2025-47531 Malicious code in @sev-ui-verse/config-service (npm)

The package @sev-ui-verse/config-service was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 188aa603d30650e09cc52a7e6d86df9d9fa9e4bce6239596a6ee4a7a75a968bf Any computer that has this package installed or running should be considere...

Malicious code in postman-converters (npm)

The package postman-converters was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f892ed43c85774f667cf9303e6d7ca7d30763a23dc3c6bb4e2261954dfee9070 Any computer that has this package installed or running should be considered fully...