EUVD-2025-28581

Malicious code in bioql PyPI...

CVE-2025-55106

CVE-2025-55106 concerns Esri Portal for ArcGIS Enterprise Sites, affected versions 10.9.1–11.4. A stored cross-site scripting vulnerability exists where an authenticated user can inject a malicious file containing an XSS script; when the file is loaded, it may execute arbitrary JavaScript in the ...

CVE-2025-55103

Esri Portal for ArcGIS Enterprise Sites versions 10.9.1–11.4 are affected by a stored Cross-site Scripting vulnerability. A remote, authenticated attacker can inject a file containing a script, potentially causing arbitrary JavaScript execution in the victim’s browser. Privileges required are hig...