EUVD-2023-42755

Malicious code in bioql PyPI...

EUVD-2023-57360

Malicious code in bioql PyPI...

EUVD-2021-32730

Malicious code in bioql PyPI...

EUVD-2022-24812

Malicious code in bioql PyPI...

EUVD-2024-37261

Malicious code in bioql PyPI...

EUVD-2024-27085

Malicious code in bioql PyPI...

EUVD-2025-16767

Malicious code in bioql PyPI...

EUVD-2022-35899

Malicious code in bioql PyPI...

EUVD-2024-27081

Malicious code in bioql PyPI...

CVE-2025-60451

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module...

CVE-2025-60451

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module...

PT-2025-40520

Name of the Vulnerable Software and Affected Versions MetInfo CMS version 8.0 Description A stored Cross-Site Scripting XSS flaw exists because of inadequate validation and sanitization of SVG file uploads. The issue is located in the appsystemincludemoduleuploadify.class.php component within the...

CVE-2025-60451

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module...

CVE-2025-60451

A stored Cross-Site Scripting (XSS) vulnerability exists in MetInfo CMS version 8.0 . The flaw is caused by insufficient validation and sanitization of SVG file uploads within the app ew_system ew_include ew_module ew_uploadify.class.php component, specifically in the website settings module . An...

CVE-2025-60451: Improper Neutralization of Input During Web Page Generation

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists due to insufficient validation and sanitization of SVG file uploads in the app\system\include\module\uploadify.class.php component, specifically in the website settings module...

The vulnerability of the NaumenKMS knowledge management system, related to the lack of measures taken to protect the website structure, allows attackers to execute arbitrary JavaScript code.

The vulnerability of the NaumenKMS knowledge management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...

The vulnerability of the Reezonly LMS platform, related to the lack of measures taken to protect the website structure, allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of the Reezonly LMS platform relates to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the FreeScout support service management system, related to the lack of measures to protect the website structure, allows attackers to perform cross-site scripting attacks.

The vulnerability of the FreeScout support service management system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

CVE-2025-7063

Due to client-controlled permission check parameter, PAD CMS's file upload functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution. This issue affects all 3 templates: www, b...

CVE-2025-8120

CVE-2025-8120 affects PAD CMS: upload photo function is vulnerable because of a client-controlled permission check parameter, allowing unauthenticated remote attackers to upload arbitrary files and execute remote code. Impacts all templates (www, bip, ww+bip). The product is End-Of-Life, and the ...