CVE-2025-11341

A security flaw has been discovered in Jinher OA up to 2.0. This affects an unknown function of the file /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=SystemUserInfo&style=1. Performing manipulation results in xml external entity reference. Remote exploitation of the attack is possible. Th...

EUVD-2023-29867

Malicious code in bioql PyPI...

EUVD-2023-35550

Malicious code in bioql PyPI...

EUVD-2024-29779

Malicious code in bioql PyPI...

EUVD-2024-43495

Malicious code in bioql PyPI...

EUVD-2025-3248

Malicious code in bioql PyPI...

EUVD-2023-36548

Malicious code in bioql PyPI...

EUVD-2024-28995

Malicious code in bioql PyPI...

EUVD-2022-50372

Malicious code in bioql PyPI...

EUVD-2023-38129

Malicious code in bioql PyPI...

EUVD-2023-27787

Malicious code in bioql PyPI...

EUVD-2024-22925

Malicious code in bioql PyPI...

EUVD-2023-37485

Malicious code in bioql PyPI...

EUVD-2025-30622

Malicious code in bioql PyPI...

EUVD-2024-52062

Malicious code in bioql PyPI...

EUVD-2024-40232

Malicious code in bioql PyPI...

CVE-2025-9969 Reflected XSS in Vizly Web Design's Real Estate Packages

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Vizly Web Design Real Estate Packages allows Content Spoofing, CAPEC - 593 - Session Hijacking, CAPEC - 591 - Reflected XSS. This issue affects Real Estate Packages: before 5.1...

CVE-2025-9969

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Vizly Web Design Real Estate Packages allows Content Spoofing, CAPEC - 593 - Session Hijacking, CAPEC - 591 - Reflected XSS. This issue affects Real Estate Packages: before 5.1...

Vizly Web Design Real Estate Packages 跨站脚本漏洞

Vizly Web Design Real Estate Packages is a web design template for real estate presentations from Vizly Web Design in Turkey. A cross-site scripting vulnerability exists in Vizly Web Design Real Estate Packages versions prior to 5.1 that stems from improper input neutralization and could lead to...

CVE-2025-8411

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Dokuzsoft Technology E-Commerce Web Design Product allows XSS Through HTTP Headers. This issue affects E-Commerce Web Design Product: before 11.08.2025...