EUVD-2024-48130

Malicious code in bioql PyPI...

CVE-2025-50592

CVE-2025-50592 is an XSS vulnerability affecting SeaCMS (“seacms”) prior to version 13.2, exploitable via the vid parameter in Upload/js/player/dmplayer/player. Root cause is cross-site scripting in that input path, with the CVSSv3.1 base score listed as 5.4 (Medium). Affected product: SeaCMS v13...

CVE-2024-41444

SeaCMS v12.9 contains a SQL injection vulnerability in the key parameter of /js/player/dmplayer/dmku/index.php?ac=so. The CVE-2024-41444 entry is rated CRITICAL (CVSS v3.1: 9.8) with network access, low exploit complexity, and no privileges required, affecting confidentiality, integrity, and avai...