EUVD-2022-7395

Malicious code in bioql PyPI...

EUVD-2025-2196

Malicious code in bioql PyPI...

EUVD-2024-43429

Malicious code in bioql PyPI...

EUVD-2025-7193

Malicious code in bioql PyPI...

EUVD-2023-51945

Malicious code in bioql PyPI...

EUVD-2025-2197

Malicious code in bioql PyPI...

EUVD-2025-7194

Malicious code in bioql PyPI...

EUVD-2022-44823

Malicious code in bioql PyPI...

EUVD-2025-25855

Malicious code in bioql PyPI...

EUVD-2021-3062

Malicious code in bioql PyPI...

EUVD-2023-36360

Malicious code in bioql PyPI...

EUVD-2024-16927

Malicious code in bioql PyPI...

EUVD-2022-4153

Malicious code in bioql PyPI...

EUVD-2024-32998

Malicious code in bioql PyPI...

EUVD-2024-2808

Malicious code in bioql PyPI...

CVE-2025-4957: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Metagauss ProfileGrid profilegrid-user-profiles-groups-and-communities allows Reflected XSS.This issue affects ProfileGrid : from n/a through = 5.9.5.7...

CVE-2025-59821

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1.0, DNN’s URL/path handling and template rendering can allow specially crafted input to be reflected into a user profile that is returned to the browser. In these cases,...

CVE-2025-59821 DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile

DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1.0, DNN’s URL/path handling and template rendering can allow specially crafted input to be reflected into a user profile that is returned to the browser. In these cases,...

GHSA-4269-MCFH-CP7Q Indico may disclose unauthorized user details access via legacy API

Impact A legacy API to retrieve user details could be misused to retrieve profile details of other users without having admin permissions due to a broken access check. Patches You should to update to Indico 3.3.8 as soon as possible. See the docs for instructions on how to update. Workarounds It ...

CVE-2025-59034 Indico may disclose unauthorized user details access via legacy API

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Prior to version 3.3.8, a legacy API to retrieve user details could be misused to retrieve profile details of other users without having admin permissions due to a broken access check...