EUVD-2024-48975

Malicious code in bioql PyPI...

EUVD-2023-48140

Malicious code in bioql PyPI...

EUVD-2024-44828

Malicious code in bioql PyPI...

EUVD-2023-53913

Malicious code in bioql PyPI...

EUVD-2023-2920

Malicious code in bioql PyPI...

EUVD-2023-29645

Malicious code in bioql PyPI...

EUVD-2025-17629

Malicious code in bioql PyPI...

EUVD-2022-43313

Malicious code in bioql PyPI...

EUVD-2023-54151

Malicious code in bioql PyPI...

EUVD-2025-32359

HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields...

Server-Side Request Forgery (SSRF)

mautic/core is vulnerable to Server-Side Request Forgery SSRF. The vulnerability is due to missing validation of webhook destinations, which allows an attacker with webhook permissions to send crafted requests and potentially access internal services, bypassing firewalls...

PT-2025-40823

CVE-2025-61585 - Apache Felix Unvalidated User Input CVE ID : CVE-2025-61585 Published : Oct. 3, 2025, 9:15 p.m. | 2 hours, 13 minutes ago Description : Rejected reason: Further research determined the issue is not an independent vulnerability as it originates from Apache Felix. Severity: 0.0 | N...

MetInfo CMS 安全漏洞

MetInfo CMS is a content management system from China's Mito MetInfo. A security vulnerability exists in MetInfo CMS version 8.0, which stems from an unvalidated SVG file input in the Image Management module and could lead to a stored cross-site scripting attack...

PT-2025-40574

Name of the Vulnerable Software and Affected Versions HCL MyXalytics version 6.6 Description The software is susceptible to a Mass Assignment issue. This happens when user-supplied data is automatically mapped to application objects without sufficient validation or access controls, potentially...

MetInfo CMS 安全漏洞

MetInfo CMS is a content management system CMS from China's Mito MetInfo. A security vulnerability exists in MetInfo CMS version 8.0, which stems from an unvalidated SVG file input in the download management module, which could lead to a stored cross-site scripting attack...

ERPNEXT 安全漏洞

ERPNext is an open source enterprise resource planning solution from ERPNext India. ERPNext suffers from a SQL injection vulnerability that stems from the lack of validation of the orderby and groupby parameters against externally entered SQL statements. An attacker can exploit this vulnerability...

PT-2025-40653

CVE-2025-61852 - Cisco WebEx Meeting Center Unvalidated Redirect CVE ID : CVE-2025-61852 Published : Oct. 2, 2025, 3:15 a.m. | 1 hour, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

PHP Education Management 跨站脚本漏洞

PHP Education Management is an education manager by the individual developer Iqbolshoh Ilhomjonov. A cross-site scripting vulnerability exists in PHP Education Management version 1.0, which stems from unvalidated input in the title field in topics.php and could lead to a stored cross-site scripti...

PT-2025-40655

CVE-2025-61854 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-61854 Published : Oct. 2, 2025, 3:15 a.m. | 1 hour, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

TP-Link AX1800 安全漏洞

TP-Link AX1800 is a WiFi router from China P&L TP-Link. A security vulnerability exists in the TP-Link AX1800 that stems from an unvalidated dbdir field that could lead to the execution of arbitrary code...