485 matches found
EUVD-2023-34908
Malicious code in bioql PyPI...
EUVD-2023-1052
Malicious code in bioql PyPI...
EUVD-2024-34794
Malicious code in bioql PyPI...
EUVD-2025-31085
Malicious code in bioql PyPI...
EUVD-2024-53504
Malicious code in bioql PyPI...
EUVD-2024-45809
Malicious code in bioql PyPI...
EUVD-2025-23940
Malicious code in bioql PyPI...
Argo CD 代码问题漏洞
Argo CD is an Argo open source declarative GitOps continuous delivery tool for Kubernetes. A code issue vulnerability exists in Argo CD that stems from a malicious API request that is not handled correctly, which could lead to an API server crash and denial of service. The following versions are...
CVE-2025-10449
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Saysis Computer Systems Trade Ltd. Co. Saysis Web Portal allows Path Traversal. This issue affects Saysis Web Portal: from 3.1.9 & 3.2.0 before 3.2.1...
CVE-2025-10449
CVE-2025-10449 affects Saysis Web Portal versions 3.1.9 and 3.2.0 prior to 3.2.1. Root cause is improper limitation of a pathname to a restricted directory, enabling path traversal. Evidence from multiple sources (CVE entries and PT-2025-39365) confirms the issue and lists 3.2.1 as the fixed vers...
CVE-2025-10449 Path Traversal in Saysis Computer Systems' Saysis Web Portal
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Saysis Computer Systems Trade Ltd. Co. Saysis Web Portal allows Path Traversal. This issue affects Saysis Web Portal: from 3.1.9 & 3.2.0 before 3.2.1...
PT-2025-39365
Name of the Vulnerable Software and Affected Versions Saysis Web Portal versions 3.1.9 through 3.2.0 Description A Path Traversal issue exists in Saysis Web Portal. The issue allows unauthorized access due to improper limitation of a pathname to a restricted directory. Recommendations Update to...
Saysis Web Portal 路径遍历漏洞
Saysis Web Portal is a web portal product from Saysis, Turkey. A path traversal vulnerability exists in Saysis Web Portal version 3.1.9 and versions 3.2.0 through prior to 3.2.1, which stems from an improperly restricted pathname and could lead to a path traversal attack...
CVE-2025-58990
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in DevItems ShopLentor woolentor-addons allows Stored XSS.This issue affects ShopLentor: from n/a through = 3.2.0...
CVE-2025-54301
A stored XSS vulnerability in Quantum Manager component 1.0.0-3.2.0 for Joomla was discovered. File names are not properly escaped...
CVE-2025-57890 WordPress Sessions Plugin <= 3.2.0 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pierre Lannoy Sessions sessions allows Stored XSS.This issue affects Sessions: from n/a through = 3.2.0...
WordPress plugin Sessions 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
CVE-2012-10059
Dolibarr ERP/CRM contains a post-authenticated OS command injection in its database backup feature. In versions <= 3.1.1 and
CVE-2025-8751
A vulnerability was found in Protected Total WebShield Extension up to 3.2.0 on Chrome. It has been classified as problematic. This affects an unknown part of the component Block Page. The manipulation of the argument Category leads to cross site scripting. It is possible to initiate the attack...
CVE-2025-8751
A vulnerability was found in Protected Total WebShield Extension up to 3.2.0 on Chrome. It has been classified as problematic. This affects an unknown part of the component Block Page. The manipulation of the argument Category leads to cross site scripting. It is possible to initiate the attack...