EUVD-2019-0274

Malware in sbrugna...

EUVD-2025-9749

Malicious code in bioql PyPI...

CVE-2025-31389

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Introvoke Inc. dba Sequel.io Sequel sequel allows Reflected XSS.This issue affects Sequel: from n/a through = 1.0.11...

CVE-2025-31389

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Introvoke Inc. dba Sequel.io Sequel sequel allows Reflected XSS.This issue affects Sequel: from n/a through = 1.0.11...

CVE-2025-31389 WordPress Sequel plugin <= 1.0.11 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sequel.Io Sequel allows Reflected XSS.This issue affects Sequel: from n/a through 1.0.11...

CVE-2025-31389

The CVE-2025-31389 entry covers a Reflected XSS in the Sequel plugin (Sequel.io Sequel) for the Sequel: from n/a through 1.0.11. Connected sources confirm the issue is a cross-site scripting vulnerability in the web page generation path, caused by improper input neutralization. The Wordfence entr...

CVE-2025-31389 WordPress Sequel plugin <= 1.0.11 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Introvoke Inc. dba Sequel.io Sequel sequel allows Reflected XSS.This issue affects Sequel: from n/a through = 1.0.11...

WordPress plugin Sequel 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

CVE-2025-31389: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Introvoke Inc. dba Sequel.io Sequel sequel allows Reflected XSS.This issue affects Sequel: from n/a through = 1.0.11...

PT-2025-14894 · Sequel · Sequel

Name of the Vulnerable Software and Affected Versions: Sequel versions 1.0.11 and earlier Description: The issue affects Sequel due to improper neutralization of input during web page generation, allowing reflected Cross-site Scripting XSS. Recommendations: For Sequel versions 1.0.11 and earlier,...

SQL Injection in waterline-sequel

Withdrawn: Duplicate of GHSA-cgpp-wm2h-6hqx...

GHSA-MPCX-8QQW-RMCQ SQL Injection in waterline-sequel

Withdrawn: Duplicate of GHSA-cgpp-wm2h-6hqx...

Operation AppleJeus Sequel

The Lazarus group is currently one of the most active and prolific APT actors. In 2018, Kaspersky published a report on one of their campaigns, named Operation AppleJeus. Notably, this operation marked the first time Lazarus had targeted macOS users, with the group inventing a fake company in ord...

SQL Injection in waterline-sequel

Affected versions of waterline-sequel are vulnerable to SQL injection in cases where user input is passed into the like, contains, startsWith, or endsWith methods. Recommendation Upgrade to at least version 0.5.1...

collectortoqueue (>=1.2.10, <=1.2.26), gladys (>=2.1.5, <=2.1.9) +13 more potentially affected by CVE-2016-10551 via waterline-sequel (>=0.0.21, <=0.4.0)

waterline-sequel NPM version =0.0.21, =1.2.10, =2.1.5, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.1.0, =0.0.1, =0.10.1, =0.0.1, =0.10.1, =0.7.3, =1.0.0-alpha.0, =0.1.0, =0.4.8 Source cves: CVE-2016-10551 Source advisory: OSV:GHSA-CGPP-WM2H-6HQX...

GHSA-CGPP-WM2H-6HQX SQL Injection in waterline-sequel

Affected versions of waterline-sequel are vulnerable to SQL injection in cases where user input is passed into the like, contains, startsWith, or endsWith methods. Recommendation Upgrade to at least version 0.5.1...

waterline-sequel SQL Injection Vulnerability

waterline-sequel is a helper library for generating SQL queries from the Waterline query language. A security vulnerability exists in waterline-sequel version 0.50. An attacker can exploit this vulnerability to inject and execute SQL statements to gain full access to the database...

Hardcoded credentials

waterline-sequel is a module that helps generate SQL statements for Waterline apps Any user input that goes into Waterline's like, contains, startsWith, or endsWith will end up in waterline-sequel with the potential for malicious code. A malicious user can input their own SQL statements in...

CVE-2016-10551

waterline-sequel is a module that helps generate SQL statements for Waterline apps Any user input that goes into Waterline's like, contains, startsWith, or endsWith will end up in waterline-sequel with the potential for malicious code. A malicious user can input their own SQL statements in...

CVE-2016-10551

waterline-sequel is a module that helps generate SQL statements for Waterline apps Any user input that goes into Waterline's like, contains, startsWith, or endsWith will end up in waterline-sequel with the potential for malicious code. A malicious user can input their own SQL statements in...