EUVD-2021-29811

Malicious code in bioql PyPI...

EUVD-2023-54151

Malicious code in bioql PyPI...

EUVD-2025-29800

Malicious code in bioql PyPI...

EUVD-2022-24358

Malicious code in bioql PyPI...

EUVD-2025-28128

Malicious code in bioql PyPI...

EUVD-2025-31069

Malicious code in bioql PyPI...

EUVD-2025-22152

Malicious code in bioql PyPI...

EUVD-2025-26710

Malicious code in bioql PyPI...

EUVD-2025-16668

Malicious code in bioql PyPI...

EUVD-2025-31581

Malicious code in bioql PyPI...

EUVD-2025-32359

HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields...

PT-2025-40823

CVE-2025-61585 - Apache Felix Unvalidated User Input CVE ID : CVE-2025-61585 Published : Oct. 3, 2025, 9:15 p.m. | 2 hours, 13 minutes ago Description : Rejected reason: Further research determined the issue is not an independent vulnerability as it originates from Apache Felix. Severity: 0.0 | N...

MetInfo CMS 安全漏洞

MetInfo CMS is a content management system CMS from China's Mito MetInfo. A security vulnerability exists in MetInfo CMS version 8.0, which stems from an unvalidated SVG file input in the download management module, which could lead to a stored cross-site scripting attack...

PT-2025-40574

Name of the Vulnerable Software and Affected Versions HCL MyXalytics version 6.6 Description The software is susceptible to a Mass Assignment issue. This happens when user-supplied data is automatically mapped to application objects without sufficient validation or access controls, potentially...

PHP Education Management 跨站脚本漏洞

PHP Education Management is an education manager by the individual developer Iqbolshoh Ilhomjonov. A cross-site scripting vulnerability exists in PHP Education Management version 1.0, which stems from unvalidated input in the title field in topics.php and could lead to a stored cross-site scripti...

PT-2025-40441

CVE-2025-61714 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-61714 Published : Oct. 1, 2025, 3:15 a.m. | 2 hours, 24 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an unvalidated copy-frame size that could lead to a memory copy overflow...

Arbitrary Command Injection

Overview figma-developer-mcp is a Give your coding agent access to your Figma data. Implement designs in any framework in one-shot. Affected versions of this package are vulnerable to Arbitrary Command Injection via the childprocess.exec call using unvalidated user input directly within...

CVE-2025-10341

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'company' at the endpoint '/clients/client/x...

MegaSys Telenium Online Web Application 操作系统命令注入漏洞

MegaSys Telenium Online Web Application is a web management module from MegaSys, Inc. An operating system command injection vulnerability exists in MegaSys Telenium Online Web Application that originates from a PHP endpoint that does not properly validate or clean up user input, which could lead ...