EUVD-2017-8773

Malware in sbrugna...

CVE-2025-11398: Unrestricted Upload of File with Dangerous Type

A weakness has been identified in SourceCodester Hotel and Lodge Management System 1.0. The impacted element is an unknown function of the file /profile.php of the component Profile Page. Executing manipulation of the argument image can lead to unrestricted upload. The attack may be launched...

EUVD-2025-21054

Malicious code in bioql PyPI...

EUVD-2024-53481

Malicious code in bioql PyPI...

EUVD-2025-6509

Malicious code in bioql PyPI...

EUVD-2021-31801

Malicious code in bioql PyPI...

EUVD-2024-51978

Malicious code in bioql PyPI...

EUVD-2025-22268

Malicious code in bioql PyPI...

EUVD-2025-15617

Malicious code in bioql PyPI...

EUVD-2025-4790

Malicious code in bioql PyPI...

EUVD-2025-28769

Malicious code in bioql PyPI...

EUVD-2025-27106

Malicious code in bioql PyPI...

EUVD-2025-12725

Malicious code in bioql PyPI...

EUVD-2024-16787

Malicious code in bioql PyPI...

EUVD-2022-45184

Malicious code in bioql PyPI...

CVE-2025-28016: Improper Neutralization of Input During Web Page Generation

A Reflected Cross-Site Scripting XSS vulnerability was found in loginsystem/edit-profile.php of the PHPGurukul User Registration & Login and User Management System V3.3. This vulnerability allows remote attackers to execute arbitrary JavaScript code via the fname, lname, and contact parameters...

CVE-2025-10663: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Online Course Registration 3.1. This affects an unknown function of the file /my-profile.php. Performing manipulation of the argument cgpa results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used...

CVE-2025-10114

A vulnerability was found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the argument Name results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

CVE-2025-10114: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the argument Name results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used...

CVE-2025-10076

A weakness has been identified in SourceCodester Online Polling System 1.0. This affects an unknown function of the file /manage-profile.php. This manipulation of the argument email causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and...