EUVD-2025-29066

Malicious code in bioql PyPI...

EUVD-2025-23035

Malicious code in bioql PyPI...

EUVD-2024-0386

Malicious code in bioql PyPI...

EUVD-2023-12717

Malicious code in bioql PyPI...

EUVD-2023-27466

Malicious code in bioql PyPI...

EUVD-2022-2217

Malicious code in bioql PyPI...

EUVD-2025-21402

Malicious code in bioql PyPI...

EUVD-2024-42896

Malicious code in bioql PyPI...

EUVD-2022-4417

Malicious code in bioql PyPI...

EUVD-2023-51295

Malicious code in bioql PyPI...

EUVD-2024-49518

Malicious code in bioql PyPI...

EUVD-2023-58961

Malicious code in bioql PyPI...

EUVD-2022-40992

Malicious code in bioql PyPI...

EUVD-2023-58786

Malicious code in bioql PyPI...

EUVD-2022-34374

Malicious code in bioql PyPI...

TRUFusion Entreprise Sensitive Data Exposure

TRUFusion Entreprise is a solution to easily and securely manage the exchange of CAD files and related product design data from within your PLM system. Due to a lack of control, it is possible for an unauthenticated attacker to access an endpoint that returns all partners who have access to the...

QNAP QTS 格式化字符串错误漏洞

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...

CVE-2025-40646

CVE-2025-40646 describes a Stored Cross-Site Scripting (XSS) in Energy CRM v2025 by Status Tracker Ltd. The vulnerability arises from insufficient validation of user input in a POST to /crm/create_job_submit.php, using the JobCreatedBy parameter. An attacker could craft a request that, when viewe...

CVE-2025-40646 Multiple vulnerabilities in Energy CRM by Status Tracker

Stored Cross-Site Scripting XSS vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/createjobsubmit.php”, using the “JobCreatedBy” parameter. This vulnerability could allow a remote...

PT-2025-40329

Name of the Vulnerable Software and Affected Versions Viday affected versions not specified Description An unauthenticated attacker can obtain sensitive customer information by sending an HTTP GET request to the /api/reserva/web/clients API endpoint. The vulnerability involves the exposure of...