EUVD-2022-4243

Malicious code in bioql PyPI...

EUVD-2022-52181

Malicious code in bioql PyPI...

EUVD-2025-29526

Malicious code in bioql PyPI...

CVE-2025-59772 Multiple vulnerabilities in AndSoft's e-TMS

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l, demo, demo2, TNTLOGIN, UO and...

CVE-2025-59762

CVE-2025-59762 is a reflected XSS in AndSoft e-TMS v25.03. The vulnerability stems from insufficient validation of the parameters l, demo, demo2, TNTLOGIN, UO and SuppConn in /clt/LOGINFRM_DLG.ASP, enabling an attacker to inject JavaScript via a malicious URL. Documented across NVD/CVE records an...

CVE-2025-46148

creationtimestamp| type| source ---|---|--- 2025-09-24 05:17:18+00:00| seen| https://gist.github.com/shaoyuyoung/4bcefba4004f8271e64b5185c95a248a 2025-09-25 14:33:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115265426624032158...

0xtrails (>=0.1.9, <=0.2.2), @aarc-dev/deposit-widget (>=0.4.2, <=0.4.47) +4 more potentially affected by CVE-2025-59430 via @meshconnect/web-link-sdk (>=3.0.2, <=3.2.14)

@meshconnect/web-link-sdk NPM version =3.0.2, =0.1.9, =0.4.2, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.3 Source cves: CVE-2025-59430 Source advisory: OSV:GHSA-VH3F-QPPR-J97F...

Cross-site Scripting (XSS)

Overview @meshconnect/web-link-sdk is an A client-side JS library for integrating with Mesh Connect Affected versions of this package are vulnerable to Cross-site Scripting XSS via the createLink.openLink function. An attacker can execute arbitrary JavaScript code in the context of the parent pag...

0xtrails (>=0.1.9, <=0.2.2), @aarc-dev/deposit-widget (>=0.4.2, <=0.4.47) +4 more potentially affected by CVE-2025-59430 via @meshconnect/web-link-sdk (>=3.0.2, <=3.2.14)

@meshconnect/web-link-sdk NPM version =3.0.2, =0.1.9, =0.4.2, =0.0.1, =0.0.2, =0.0.1, =0.0.1, =0.0.3 Source cves: CVE-2025-59430 Source advisory: SNYK:JS-MESHCONNECTWEBLINKSDK-13004671...

CVE-2025-58250

creationtimestamp| type| source ---|---|--- 2025-09-22 20:04:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzh7dftbxp2t...

CVE-2025-10416

creationtimestamp| type| source ---|---|--- 2025-09-15 03:02:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lytsxfzcbu2a 2025-09-15 06:19:07+00:00| seen| https://gist.github.com/Darkcrai86/220794bb2c069ffa50d43090e03af30a...

Apple多款产品 安全漏洞

Apple Safari is a web browser that is the default browser that comes with the Mac OS X and iOS operating systems.Apple iOS is a suite of operating systems developed for mobile devices.Apple iPadOS is a suite of operating systems for the iPad tablet computer. A security vulnerability exists in...

CVE-2025-59363

creationtimestamp| type| source ---|---|--- 2025-09-14 07:47:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyrsg5iboe2c 2025-09-15 03:01:45+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3lytswmwk3f2d 2025-09-15 07:51:31+00:00| seen|...

CVE-2025-43789

creationtimestamp| type| source ---|---|--- 2025-09-12 05:17:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lymj54begf2c...

CVE-2025-10246

creationtimestamp| type| source ---|---|--- 2025-09-11 06:51:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyk5vfvpyz2c...

CVE-2025-10236

creationtimestamp| type| source ---|---|--- 2025-09-11 02:57:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyjqsr37fs2t...

CVE-2025-32990

creationtimestamp| type| source ---|---|--- 2025-09-10 09:29:04+00:00| seen| https://gist.github.com/Darkcrai86/b87e14a5bc55e398469cc37b642c3272 2025-09-30 01:31:27+00:00| seen| https://bsky.app/profile/gcpweekly.bsky.social/post/3lzzeuwsiue2i 2025-10-13 02:31:29+00:00| seen|...

CVE-2007-4105

creationtimestamp| type| source ---|---|--- 2025-09-09 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lygmjfpvlo2g...

CVE-2025-43776

creationtimestamp| type| source ---|---|--- 2025-09-09 15:23:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyfzlgrych2t...

CVE-2025-56266

A Host Header Injection vulnerability exists in Avigilon ACM v7.10.0.20 , a physical access control system. By supplying a crafted URL , an unauthenticated attacker can achieve remote code execution , potentially compromising the entire system. While the vulnerability is confirmed, the provided d...