EUVD-2024-41843

Malicious code in bioql PyPI...

EUVD-2023-43409

Malicious code in bioql PyPI...

EUVD-2022-5795

Malicious code in bioql PyPI...

EUVD-2023-47686

Malicious code in bioql PyPI...

EUVD-2022-33411

Malicious code in bioql PyPI...

EUVD-2022-6013

Malicious code in bioql PyPI...

EUVD-2022-47801

Malicious code in bioql PyPI...

EUVD-2022-50824

Malicious code in bioql PyPI...

EUVD-2022-41374

Malicious code in bioql PyPI...

EUVD-2022-46381

Malicious code in bioql PyPI...

EUVD-2022-6467

Malicious code in bioql PyPI...

EUVD-2022-47876

Malicious code in bioql PyPI...

EUVD-2022-47879

Malicious code in bioql PyPI...

EUVD-2023-43410

Malicious code in bioql PyPI...

CVE-2025-59524 Horilla Stored XSS Vulnerability via File Upload in Reimbursement Panel

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, the file upload flow performs validation only in the browser and does not enforce server-side checks. An attacker can bypass the client-side validation for example, with an intercepting proxy or by...

IBM Watson Studio on Cloud Pak for Data Cross-Site Scripting Vulnerability

IBM Watson Studio on Cloud Pak for Data is an intelligent search and text analytics platform from International Business Machines IBM. A cross-site scripting vulnerability exists in IBM Watson Studio on Cloud Pak for Data versions 4.0 and 5.0, which stems from the application's lack of effective...

PT-2025-31808 · Intelbras · Intelbras Rx 1500 +1

Name of the Vulnerable Software and Affected Versions: Intelbras RX1500 version 2.2.9 Intelbras RX3000 version 1.0.11 Description: A cross-site scripting XSS vulnerability allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the name of a visiting Wi-Fi...

CVE-2025-26065: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Intelbras RX1500 v2.2.9 and RX3000 v1.0.11 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name of a visiting Wi-Fi network...

CVE-2025-51396

A stored cross-site scripting XSS vulnerability in Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Telegram Bot Username parameter...

CVE-2025-51403

A stored cross-site scripting XSS vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Alias Nick parameter...