EUVD-2023-35111

Malicious code in bioql PyPI...

EUVD-2025-15098

Malicious code in bioql PyPI...

EUVD-2022-32047

Malicious code in bioql PyPI...

EUVD-2024-25237

Malicious code in bioql PyPI...

EUVD-2025-21890

Malicious code in bioql PyPI...

EUVD-2024-32418

Malicious code in bioql PyPI...

EUVD-2023-58204

Malicious code in bioql PyPI...

EUVD-2022-2513

Malicious code in bioql PyPI...

EUVD-2022-15358

Malicious code in bioql PyPI...

EUVD-2023-58784

Malicious code in bioql PyPI...

EUVD-2024-54152

Malicious code in bioql PyPI...

EUVD-2023-59333

Malicious code in bioql PyPI...

EUVD-2025-2871

Malicious code in bioql PyPI...

EUVD-2025-23658

Malicious code in bioql PyPI...

CVE-2025-60991

A reflected cross-site scripted XSS vulnerability in Codazon Magento Themes v1.1.0.0 to v2.4.7 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload injected into the cat parameter...

CVE-2025-59768

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59750

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

Liferay Portal vulnerable to reflected cross-site scripting on the page configuration page

Reflected cross-site scripting XSS vulnerability on the page configuration page in Liferay Portal 7.4.3.102 through 7.4.3.110, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, and 2023.Q3.5 allows remote attackers to inject arbitrary web script or HTML via the...

CVE-2025-43815

Reflected cross-site scripting XSS vulnerability on the page configuration page in Liferay Portal 7.4.3.102 through 7.4.3.110, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, and 2023.Q3.5 allows remote attackers to inject arbitrary web script or HTML via the...

CVE-2025-43815

CVE-2025-43815 is a reflected XSS in Liferay Portal 7.4.3.102–7.4.3.110 and Liferay DXP 2023.Q4.0–2023.Q4.2 (and 2023.Q3.5) exploitable via the com_liferay_layout_admin_web_portlet_GroupPagesPortlet_backURLTitle parameter on the page configuration page. The issue allows an attacker to inject arbi...