1207 matches found
EUVD-2022-24774
Malicious code in bioql PyPI...
EUVD-2025-30890
Malicious code in bioql PyPI...
EUVD-2024-53312
Malicious code in bioql PyPI...
EUVD-2025-4348
Malicious code in bioql PyPI...
EUVD-2025-2861
Malicious code in bioql PyPI...
EUVD-2025-13838
Malicious code in bioql PyPI...
EUVD-2025-27972
Malicious code in bioql PyPI...
EUVD-2025-3926
Malicious code in bioql PyPI...
EUVD-2025-27593
Malicious code in bioql PyPI...
EUVD-2025-24910
Malicious code in bioql PyPI...
EUVD-2023-54495
Malicious code in bioql PyPI...
EUVD-2025-25172
Malicious code in bioql PyPI...
PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.
...
CVE-2025-59948 FreshRSS is vulnerable to XSS due to lack of CSP on HTML query page
FreshRSS is a free, self-hostable RSS aggregator. Versions 1.26.3 and below do not sanitize certain event handler attributes in feed content, so by finding a page that renders feed entries without CSP, it is possible to execute an XSS payload. The Allow API access authentication setting needs to ...
PT-2025-39918
Name of the Vulnerable Software and Affected Versions FreshRSS versions 1.26.3 and below Description FreshRSS does not properly sanitize event handler attributes within feed content. This can lead to cross-site scripting XSS if a page renders feed entries without a Content Security Policy CSP. Th...
CVE-2025-53466
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in CodeSolz Better Find and Replace real-time-auto-find-and-replace allows Stored XSS.This issue affects Better Find and Replace: from n/a through = 1.7.6...
Uncontrolled Search Path Element
Overview @salesforce/cli is a The Salesforce CLI Affected versions of this package are vulnerable to Uncontrolled Search Path Element via the Replace Trusted Executable feature. An attacker can execute arbitrary code by placing a malicious executable in a directory that is searched before the...
CVE-2025-9844
Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects Salesforce CLI: before 2.106.6...
WordPress Better Find and Replace Plugin <= 1.7.6 - Cross Site Scripting (XSS) Vulnerability
Cross Site Scripting XSS Vulnerability discovered by Nabil Irawan in WordPress Plugin Better Find and Replace versions = 1.7.6...
CVE-2025-53466
CVE-2025-53466 describes a Stored XSS in the WordPress plugin Better Find and Replace (vulnerable through 1.7.6) caused by improper input neutralization during web page generation. The attack could occur when an attacker injects malicious payload via the plugin input and the payload is stored and...