EUVD-2024-33993

Malicious code in bioql PyPI...

EUVD-2025-20400

Malicious code in bioql PyPI...

EUVD-2023-53179

Malicious code in bioql PyPI...

EUVD-2023-29412

Malicious code in bioql PyPI...

EUVD-2024-51480

Malicious code in bioql PyPI...

EUVD-2025-4213

Malicious code in bioql PyPI...

EUVD-2023-46151

Malicious code in bioql PyPI...

EUVD-2024-49025

Malicious code in bioql PyPI...

EUVD-2024-46570

Malicious code in bioql PyPI...

EUVD-2025-18637

Malicious code in bioql PyPI...

EUVD-2025-2923

Malicious code in bioql PyPI...

EUVD-2022-42621

Malicious code in bioql PyPI...

EUVD-2024-22178

Malicious code in bioql PyPI...

EUVD-2024-48518

Malicious code in bioql PyPI...

CVE-2025-11018

A flaw has been found in Four-Faith Water Conservancy Informatization Platform 1.0. This affects an unknown function of the file /sysRole/index.do/../../generalReport/download.do;usrlogout.do.do. Executing manipulation of the argument fileName can lead to path traversal. It is possible to launch...

WordPress Photospace Responsive plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Photospace Responsive versions = 2.2.0...

CVE-2025-10961

A vulnerability was determined in Wavlink NU516U1 M16U1V240425. This affects the function sub4030C0 of the file /cgi-bin/wireless.cgi of the component DeleteMaclist Page. Executing manipulation of the argument deletelist can lead to command injection. The vendor was contacted early about this...

PT-2025-39472

Name of the Vulnerable Software and Affected Versions roncoo-pay versions prior to 9428382af21cd5568319eae7429b7e1d0332ff40 Description An issue exists in roncoo-pay where manipulation of an unknown function within the /user/info/lookupList file can lead to improper authorization. This issue can ...

CVE-2025-10978

JeecgBoot up to 3.8.2 is affected. The vulnerability lies in the Filter Handler’s /sys/user/exportXls function, where improper authorization can be triggered remotely. Reports across multiple feeds state the exploit has been released publicly, with the vendor reportedly non-responsive. Affected v...

CVE-2025-10962

The CVE-2025-10962 affects Wavlink NU516U1 M16U1_V240425. The flaw occurs in the SetName Page, function sub_403198, where manipulation of the mac_5g argument in /cgi-bin/wireless.cgi enables remote command injection. Public exploit is available, and the vendor was contacted without response. CVSS...