EUVD-2025-26372

Malicious code in bioql PyPI...

EUVD-2023-52764

Malicious code in bioql PyPI...

EUVD-2023-51955

Malicious code in bioql PyPI...

EUVD-2021-29300

Malicious code in bioql PyPI...

EUVD-2023-3003

Malicious code in bioql PyPI...

EUVD-2024-16562

Malicious code in bioql PyPI...

EUVD-2025-25192

Malicious code in bioql PyPI...

EUVD-2025-27526

Malicious code in bioql PyPI...

EUVD-2022-43288

Malicious code in bioql PyPI...

EUVD-2022-32545

Malicious code in bioql PyPI...

EUVD-2024-48951

Malicious code in bioql PyPI...

EUVD-2025-25601

Malicious code in bioql PyPI...

EUVD-2022-30856

Malicious code in bioql PyPI...

EUVD-2023-50093

Malicious code in bioql PyPI...

EUVD-2023-0770

Malicious code in bioql PyPI...

CVE-2025-43820

Multiple cross-site scripting XSS vulnerabilities in the Calendar widget when inviting users to a event in Liferay Portal 7.4.3.35 through 7.4.3.110, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.6, 7.4 update 35 through update 92, and 7.3 update 25 through update 35 allo...

CVE-2025-43820

Multiple cross-site scripting XSS vulnerabilities in the Calendar widget when inviting users to a event in Liferay Portal 7.4.3.35 through 7.4.3.110, and Liferay DXP 2023.Q4.0 through 2023.Q4.4, 2023.Q3.1 through 2023.Q3.6, 7.4 update 35 through update 92, and 7.3 update 25 through update 35 allo...

CVE-2025-43820

A validated XSS vulnerability in the Liferay Calendar widget allows remote attackers to inject arbitrary scripts via crafted input in the user’s First Name, Middle text, or Last Name fields. Affected are Liferay Portal 7.4.3.35–7.4.3.110 and Liferay DXP 2023.Q4.0–2023.Q4.4, plus 7.3 Update 25–35 ...

CVE-2025-57516

OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b allowing attackers to execute arbitrary commands via crafted DATABASE, USERNAME, or PASSWORD variables to the backupDB.bat file...

CVE-2025-10879

CVE-2025-10879 affects all versions of the Dingtian DT-R002. The vulnerability is described as Insufficiently Protected Credentials that could allow an unauthenticated attacker to retrieve the current user’s username (and, per ICS docs, potentially extract the proprietary protocol password by an ...