EUVD-2022-1185

Malicious code in bioql PyPI...

EUVD-2022-0954

Malicious code in bioql PyPI...

EUVD-2022-0433

Malicious code in bioql PyPI...

EUVD-2022-1231

Malicious code in bioql PyPI...

EUVD-2022-1172

Malicious code in bioql PyPI...

EUVD-2022-0795

Malicious code in bioql PyPI...

EUVD-2022-1212

Malicious code in bioql PyPI...

EUVD-2022-1347

Malicious code in bioql PyPI...

EUVD-2022-0659

Malicious code in bioql PyPI...

EUVD-2023-2701

Malicious code in bioql PyPI...

EUVD-2022-1320

Malicious code in bioql PyPI...

CVE-2025-58859

Cross-Site Request Forgery CSRF vulnerability in David Merinas Add to Feedly add-to-feedly allows Stored XSS.This issue affects Add to Feedly: from n/a through = 1.2.11...

WordPress Hanani theme <= 1.2.11 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by Bonds in WordPress Theme Hanani versions = 1.2.11...

Malicious code in github-proto-repositories (RubyGems)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis ad787034378f8dfd5ad9c74128aafad9b053f1296acc980aee3f70693f23d3c3 The OpenSSF Package Analysis project identified 'github-proto-repositories' @ 1.2.11.re9f78aa rubygems as malicious. It is considered malicious...

CVE-2025-58048

Paymenter is a free and open-source webshop solution for hostings. Prior to version 1.2.11, the ticket attachments functionality in Paymenter allows a malicious authenticated user to upload arbitrary files. This could result in sensitive data extraction from the database, credentials being read...

CVE-2025-58048 Paymenter Vulnerable to Remote Code Execution via Public File Uploads

Paymenter is a free and open-source webshop solution for hostings. Prior to version 1.2.11, the ticket attachments functionality in Paymenter allows a malicious authenticated user to upload arbitrary files. This could result in sensitive data extraction from the database, credentials being read...

PT-2025-35120

Name of the Vulnerable Software and Affected Versions Paymenter versions prior to 1.2.11 Description Paymenter is a free and open-source webshop solution for hostings. The ticket attachments functionality allows a malicious authenticated user to upload arbitrary files. This could result in...

CVE-2025-34076

CVE-2025-34076 is an authenticated local file inclusion in Microweber CMS (versions ≤ 1.2.11) caused by insecure handling of the backup management API. The vulnerable components are the /api/BackupV2/upload and /api/BackupV2/download endpoints, which allow an absolute file path to be supplied via...

Microweber CMS 路径遍历漏洞

Microweber CMS is a drag-and-drop website builder from Microweber Open Source. A path traversal vulnerability exists in Microweber CMS version 1.2.11 and earlier, which stems from a file inclusion issue that could lead to a file readout...

CVE-2024-4039

The The Orders Tracking for WooCommerce plugin for WordPress for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.2.10. This is due to the plugin allowing users to execute an action that does not properly validate a value before running doshortcode...