1050 matches found
EUVD-2025-25697
Malicious code in bioql PyPI...
EUVD-2025-25695
Malicious code in bioql PyPI...
EUVD-2023-45417
Malicious code in bioql PyPI...
EUVD-2024-43068
Malicious code in bioql PyPI...
EUVD-2023-42729
Malicious code in bioql PyPI...
EUVD-2022-28155
Malicious code in bioql PyPI...
EUVD-2023-30569
Malicious code in bioql PyPI...
EUVD-2023-30741
Malicious code in bioql PyPI...
EUVD-2023-47775
Malicious code in bioql PyPI...
EUVD-2024-52721
Malicious code in bioql PyPI...
EUVD-2025-25277
Malicious code in bioql PyPI...
EUVD-2023-56056
Malicious code in bioql PyPI...
EUVD-2024-53697
Malicious code in bioql PyPI...
CVE-2025-57423
A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Content, GroupName, PersonName, lastUpdate, pool, and title. Due to insufficient input sanitisation, an unauthenticated remote attacker could inject arbitrary SQL commands via a...
PT-2025-40337
Name of the Vulnerable Software and Affected Versions Ekushey CRM version 5.0 Description A stored Cross Site Scripting issue exists in Ekushey CRM version 5.0 due to insufficient validation of user-supplied data. The issue is located in the project bug creation functionality, accessible via the...
CVE-2025-8560
The FancyTabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...
CVE-2025-8560
The FancyTabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...
CVE-2025-8560
CVE-2025-8560 affects the WordPress FancyTabs plugin (versions up to and including 1.1.0). A stored XSS flaw exists in the title parameter due to insufficient input sanitization/escaping. Exploitation requires at least Contributor-level access; an authenticated attacker can inject scripts that ex...
CVE-2025-8560 FancyTabs <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter
The FancyTabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...
CVE-2025-8560 FancyTabs <= 1.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via title Parameter
The FancyTabs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘title’ parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and...