EUVD-2025-22459

Malicious code in bioql PyPI...

EUVD-2023-26616

Malicious code in bioql PyPI...

EUVD-2024-42903

Malicious code in bioql PyPI...

EUVD-2025-28058

Malicious code in bioql PyPI...

EUVD-2024-45463

Malicious code in bioql PyPI...

EUVD-2022-5457

Malicious code in bioql PyPI...

EUVD-2023-58194

Malicious code in bioql PyPI...

CVE-2025-41436

creationtimestamp| type| source ---|---|--- 2025-10-03 10:35:56+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m2bupca53c2q 2025-10-03 11:07:41+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m2bwi34cgk2c 2025-11-14 09:18:58+00:00| seen|...

CVE-2025-9885: Cross-Site Request Forgery (CSRF)

The MPWizard – Create Mercado Pago Payment Links plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing or incorrect nonce validation in the '/includes/admin/class-mpwizard-table.php' file. This makes it possible for...

Tenda G3 Wireless Access Point DoS

The vulnerability of the guestWifiRuleRefresh function in the Tenda G3 wireless access point’s microprogrammed software is related to buffer overflows during the processing of the gstUp parameter. Exploiting this vulnerability could allow a remote attacker to cause service failure by sending...

CVE-2025-56379

A stored cross-site scripting XSS vulnerability in the blog post feature of ERPNEXT v15.67.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the content field...

CVE-2025-56379

A stored cross-site scripting XSS vulnerability in the blog post feature of ERPNEXT v15.67.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the content field...

CVE-2025-56379

A stored cross-site scripting XSS vulnerability in the blog post feature of ERPNEXT v15.67.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the content field...

CVE-2025-56379

A stored cross-site scripting XSS vulnerability in the blog post feature of ERPNEXT v15.67.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the content field...

CVE-2025-56379

CVE-2025-56379: A stored XSS in ERPNext v15.67.0 blog module (Frappe v15.72.4) via the blog post content field. An authenticated user who can create/edit posts can inject crafted HTML/JS; payload is stored and can execute in other users’ browsers viewing the post. Affected components: ERPNext Blo...

CVE-2025-9230

creationtimestamp| type| source ---|---|--- 2025-09-30 22:26:09+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3m23kyhzcgk2z 2025-09-30 23:41:12+00:00| seen| https://bsky.app/profile/checkmarxzero.bsky.social/post/3m23p6r2cdo2d 2025-10-01 06:25:35+00:00| seen|...

CVE-2025-8961

creationtimestamp| type| source ---|---|--- 2025-09-30 01:33:03+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lzzexup6y22u 2025-09-30 01:33:04+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lzzexviigf23 2025-09-30 07:27:35+00:00| seen|...

WordPress Query Posts plugin <= 0.3.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Query Posts versions = 0.3.2...

CVE-2025-59934

creationtimestamp| type| source ---|---|--- 2025-09-27 10:48:35+00:00| seen| https://bsky.app/profile/crowdcyber.bsky.social/post/3lzssmhc5bm2l 2025-09-27 11:25:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lzsuoqm2li2l 2025-09-28 09:16:19+00:00| published-proof-of-concept|...

CVE-2025-9984

The Featured Image from URL FIFU plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the fifuapidebugposts function in all versions up to, and including, 5.2.7. This makes it possible for unauthenticated attackers to read private/password protect...