EUVD-2022-1595

Malicious code in bioql PyPI...

EUVD-2022-49669

Malicious code in bioql PyPI...

EUVD-2024-33901

Malicious code in bioql PyPI...

EUVD-2022-50634

Malicious code in bioql PyPI...

EUVD-2022-5109

Malicious code in bioql PyPI...

EUVD-2022-5962

Malicious code in bioql PyPI...

EUVD-2022-2073

Malicious code in bioql PyPI...

EUVD-2022-3012

Malicious code in bioql PyPI...

EUVD-2022-52910

Malicious code in bioql PyPI...

EUVD-2022-46381

Malicious code in bioql PyPI...

EUVD-2023-57931

Malicious code in bioql PyPI...

EUVD-2023-28290

Malicious code in bioql PyPI...

EUVD-2022-2968

Malicious code in bioql PyPI...

EUVD-2022-5269

Malicious code in bioql PyPI...

EUVD-2022-5077

Malicious code in bioql PyPI...

EUVD-2022-6467

Malicious code in bioql PyPI...

EUVD-2021-30791

Malicious code in bioql PyPI...

CVE-2025-43815: Improper Neutralization of Input During Web Page Generation

Reflected cross-site scripting XSS vulnerability on the page configuration page in Liferay Portal 7.4.3.102 through 7.4.3.110, and Liferay DXP 2023.Q4.0 through 2023.Q4.2, and 2023.Q3.5 allows remote attackers to inject arbitrary web script or HTML via the...

PT-2025-43300

Name of the Vulnerable Software and Affected Versions Werk aan de Muur versions prior to 1.6 Description Stored Cross-Site Scripting occurs due to insufficient input sanitization and output escaping. This allows authenticated attackers with administrator-level access and above to inject arbitrary...

CVE-2025-59524 Horilla Stored XSS Vulnerability via File Upload in Reimbursement Panel

Horilla is a free and open source Human Resource Management System HRMS. Prior to version 1.4.0, the file upload flow performs validation only in the browser and does not enforce server-side checks. An attacker can bypass the client-side validation for example, with an intercepting proxy or by...