EUVD-2025-25278

Malicious code in bioql PyPI...

EUVD-2024-27254

Malicious code in bioql PyPI...

EUVD-2023-32496

Malicious code in bioql PyPI...

EUVD-2023-50664

Malicious code in bioql PyPI...

EUVD-2023-0279

Malicious code in bioql PyPI...

EUVD-2025-28435

Malicious code in bioql PyPI...

EUVD-2025-30778

Malicious code in bioql PyPI...

EUVD-2025-25620

Malicious code in bioql PyPI...

EUVD-2022-53501

Malicious code in bioql PyPI...

EUVD-2024-23109

Malicious code in bioql PyPI...

EUVD-2022-45965

Malicious code in bioql PyPI...

EUVD-2023-1182

Malicious code in bioql PyPI...

EUVD-2022-39449

Malicious code in bioql PyPI...

EUVD-2022-6086

Malicious code in bioql PyPI...

CVE-2025-60454

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the image management module, specifically in the app\system\img\admin\imgadmin.class.php component. The vulnerability allows attackers to upload malicious SVG files containi...

The filename of uploaded files vulnerable to stored XSS in Bolt CMS

...

CVE-2025-59525

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, improper sanitization across the application allows XSS via uploaded SVG and via allowed , which can be chained to execute JavaScript whenever users view impacted content e.g., announcements. This can...

CVE-2025-48869 Horilla Unauthorized Access to Candidate Resume Files Due to Broken Access Control

Horilla is a free and open source Human Resource Management System HRMS. Unauthenticated users can access uploaded resume files in Horilla 1.3.0 by directly guessing or predicting file URLs. These files are stored in a publicly accessible directory, allowing attackers to retrieve sensitive...

CVE-2025-10009

Incorrect handling of uploaded files in the admin "Restore" function in Invoice Ninja = 5.11.72 allows attackers with admin credentials to execute arbitrary code on the server via uploaded .php files...

Horilla 访问控制错误漏洞

Horilla is a free and open source human resources software from Horilla, Inc. An access control error vulnerability exists in Horilla version 1.3.0 that originates from an unauthenticated user being able to access an uploaded resume file by guessing or predicting the file URL, which could result ...