EUVD-2022-48404

Malicious code in bioql PyPI...

EUVD-2025-28461

Malicious code in bioql PyPI...

EUVD-2025-25992

Malicious code in bioql PyPI...

EUVD-2024-52257

Malicious code in bioql PyPI...

EUVD-2022-24746

Malicious code in bioql PyPI...

EUVD-2025-9082

Malicious code in bioql PyPI...

EUVD-2025-28039

Malicious code in bioql PyPI...

EUVD-2023-29541

Malicious code in bioql PyPI...

EUVD-2025-26007

Malicious code in bioql PyPI...

EUVD-2021-9373

Malicious code in bioql PyPI...

EUVD-2025-28119

Malicious code in bioql PyPI...

EUVD-2024-26802

Malicious code in bioql PyPI...

EUVD-2025-28084

Malicious code in bioql PyPI...

EUVD-2025-28046

Malicious code in bioql PyPI...

EUVD-2025-3874

Malicious code in bioql PyPI...

WordPress plugin Uncode 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL-based...

CVE-2025-10546 Cross-Site Scripting (XSS) Vulnerability in PPC XPON ONT Wi-Fi Router

This vulnerability exist in PPC 2K15X Router, due to improper input validation for the Common Gateway Interface CGI parameters at its web management portal. A remote attacker could exploit this vulnerability by injecting malicious JavaScript into the vulnerable parameter, leading to a reflected...

PT-2025-37982

Name of the Vulnerable Software and Affected Versions: Workcube ERP versions V12 through V14 through 20250916 Description: Workcube ERP is susceptible to a Reflected Cross-site Scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Workcube ERP...

WeGIA 跨站脚本漏洞

WeGIA is a web manager for welfare organizations by the individual developer Nilson Lazarin. A cross-site scripting vulnerability exists in WeGIA versions prior to 3.4.11, which stems from a reflected cross-site scripting attack on the listardespachos.php endpoint...

CVE-2025-53307

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Beaver Builder WordPress Assistant assistant allows Reflected XSS.This issue affects WordPress Assistant: from n/a through = 1.5.2...