EUVD-2023-28095

Malicious code in bioql PyPI...

EUVD-2024-54837

Malicious code in bioql PyPI...

EUVD-2022-38013

Malicious code in bioql PyPI...

EUVD-2022-39697

Malicious code in bioql PyPI...

EUVD-2024-53483

Malicious code in bioql PyPI...

EUVD-2024-52646

Malicious code in bioql PyPI...

EUVD-2024-36627

Malicious code in bioql PyPI...

EUVD-2025-23544

Malicious code in bioql PyPI...

EUVD-2023-49513

Malicious code in bioql PyPI...

EUVD-2023-45550

Malicious code in bioql PyPI...

EUVD-2021-9285

Malicious code in bioql PyPI...

EUVD-2022-2975

Malicious code in bioql PyPI...

Nextcloud: tabnabbing in roundcube webmail

A tab nabbing vulnerability was discovered in Roundcube webmail. This vulnerability allowed a malicious website opened in a new tab to access the initial tab and change its location. This could be exploited to perform phishing attacks...

Exploit for CVE-2025-49113

CVE-2025-49113 - Roundcube Webmail Remote Code Execution Vulne...

Exploit for CVE-2025-49113

CVE-2025-49113 - Roundcube Webmail Remote Code Execution Vulne...

Linux Distros Unpatched Vulnerability : CVE-2019-13389

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RainLoop Webmail before 1.13.0 lacks XSS protection mechanisms such as xlink:href validation, the X-XSS- Protection header, and the Content-Security-Policy...

Linux Distros Unpatched Vulnerability : CVE-2024-37384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Roundcube Webmail before 1.5.7 and 1.6.x before 1.6.7 allows XSS via list columns from user preferences. CVE-2024-37384 Note that Nessus relies on the presence ...

Linux Distros Unpatched Vulnerability : CVE-2022-30287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Horde Groupware Webmail Edition through 5.2.22 allows a reflection injection attack through which an attacker can instantiate a driver class. This then leads to...

Linux Distros Unpatched Vulnerability : CVE-2024-57004

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-Site Scripting XSS vulnerability in Roundcube Webmail 1.6.9 allows remote authenticated users to upload a malicious file as an email attachment, leading t...

Linux Distros Unpatched Vulnerability : CVE-2021-26929

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 where the HordeTextFilter library before 2.3.7 is used. The attacker can send a...