EUVD-2024-49420

Malicious code in bioql PyPI...

EUVD-2024-47915

Malicious code in bioql PyPI...

EUVD-2022-47941

Malicious code in bioql PyPI...

EUVD-2024-48293

Malicious code in bioql PyPI...

EUVD-2022-41128

Malicious code in bioql PyPI...

EUVD-2022-32566

Malicious code in bioql PyPI...

EUVD-2024-49422

Malicious code in bioql PyPI...

EUVD-2022-31931

Malicious code in bioql PyPI...

EUVD-2024-43959

Malicious code in bioql PyPI...

EUVD-2024-49334

Malicious code in bioql PyPI...

EUVD-2024-51004

Malicious code in bioql PyPI...

EUVD-2024-46641

Malicious code in bioql PyPI...

EUVD-2023-30991

Malicious code in bioql PyPI...

CVE-2025-57393: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS in Kissflow Work Platform Kissflow Application Versions 7337 Account v2.0 to v4.2vallows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

CVE-2025-9946: Cross-Site Request Forgery (CSRF)

The LockerPress – WordPress Security Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and...

CVE-2025-9883: Cross-Site Request Forgery (CSRF)

The Browser Sniff plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.3. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web script...

CVE-2025-10146: Improper Neutralization of Input During Web Page Generation

The Download Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘userids’ parameter in all versions up to, and including, 3.3.23 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary w...

CVE-2025-9881: Cross-Site Request Forgery (CSRF)

The Ultimate Blogroll plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.2. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicious web...

CVE-2025-45585: Improper Neutralization of Input During Web Page Generation

Multiple stored cross-site scripting XSS vulnerabilities in Audi UTR 2.0 Universal Traffic Recorder 2.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the wifistassid or wifiapssid parameters...

CVE-2025-9880: Cross-Site Request Forgery (CSRF)

The Side Slide Responsive Menu plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0. This is due to missing or incorrect nonce validation on a function. This makes it possible for unauthenticated attackers to update settings and inject malicio...