EUVD-2025-3349

Malicious code in bioql PyPI...

EUVD-2025-3182

Malicious code in bioql PyPI...

EUVD-2023-31624

Malicious code in bioql PyPI...

EUVD-2025-10619

Malicious code in bioql PyPI...

EUVD-2023-41797

Malicious code in bioql PyPI...

EUVD-2023-37379

Malicious code in bioql PyPI...

CVE-2025-58914

Cross-Site Request Forgery CSRF vulnerability in Di Themes Di Themes Demo Site Importer di-themes-demo-site-importer allows Cross Site Request Forgery.This issue affects Di Themes Demo Site Importer: from n/a through = 1.2...

CVE-2025-60145

Cross-Site Request Forgery CSRF vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Cross Site Request Forgery.This issue affects Lenix scss compiler: from n/a through = 1.2...

CVE-2025-60145

CVE-2025-60145 : CSRF in the Lenix scss compiler (WordPress plugin lenix-scss-compiler) affects versions up to 1.2.0. Description states Cross-Site Request Forgery with CVSS 3.1 base score 4.3 (Medium); attacker requires user interaction. No explicit exploit details or patched version are provide...

CVE-2025-60144

CVE-2025-60144 concerns Stored XSS in the Lenix scss compiler caused by improper input neutralization during web page generation. Affected product: Lenix scss compiler (yonifre Lenix scss compiler) versions from n/a up to and including 1.2. The provided documents do not include exploitation detai...

CVE-2025-60144 WordPress Lenix scss compiler Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in yonifre Lenix scss compiler lenix-scss-compiler allows Stored XSS.This issue affects Lenix scss compiler: from n/a through = 1.2...

WordPress plugin Di Themes Demo Site Importer 跨站请求伪造漏洞

WordPress and the WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that provides the ability to host a personal blog site on a PHP and MySQL based server. A cross-site request forgery...

WordPress plugin Lenix scss compiler 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin ... A cross-site reques...

CVE-2025-58647 WordPress Simple Restaurant Menu Plugin <= 1.2 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Will.I.am Simple Restaurant Menu simple-restaurant-menu allows Stored XSS.This issue affects Simple Restaurant Menu: from n/a through = 1.2...

PT-2025-38936

Name of the Vulnerable Software and Affected Versions Will.I.am Simple Restaurant Menu versions through 1.2 Description The Simple Restaurant Menu software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means...

CVE-2025-59416

The Scratch Channel is a news website. If the user makes a fork, they can change the admins and make an article. Since the API uses a POST request, it will make an article. This issue is fixed in v1.2...

CVE-2025-59416 The Scratch Channel forks can publish articles

The Scratch Channel is a news website. If the user makes a fork, they can change the admins and make an article. Since the API uses a POST request, it will make an article. This issue is fixed in v1.2...

CVE-2025-59416 The Scratch Channel forks can publish articles

The Scratch Channel is a news website. If the user makes a fork, they can change the admins and make an article. Since the API uses a POST request, it will make an article. This issue is fixed in v1.2...

CVE-2025-40693

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a reflected and stored authenticated XSS due to the lack of propper validation of user inputs 'tname' parameter via GET and, 'teamleadname', 'teammember' and 'teamname' parameters via POST at the...

CVE-2025-40692

CVE-2025-40692 relates to the Online Fire Reporting System (OFRS) v1.2 by PHPGurukul. The vulnerability is a SQL injection in the /ofrs/details.php endpoint, exploitable via the requestid parameter, allowing an attacker to retrieve, create, update, and delete data in the underlying database. Root...