EUVD-2022-4457

Malicious code in bioql PyPI...

EUVD-2021-34169

Malicious code in bioql PyPI...

EUVD-2025-20375

Malicious code in bioql PyPI...

EUVD-2023-47941

Malicious code in bioql PyPI...

EUVD-2024-50783

Malicious code in bioql PyPI...

EUVD-2023-43823

Malicious code in bioql PyPI...

EUVD-2022-5241

Malicious code in bioql PyPI...

EUVD-2025-21693

Malicious code in bioql PyPI...

EUVD-2024-32779

Malicious code in bioql PyPI...

EUVD-2022-42454

Malicious code in bioql PyPI...

EUVD-2022-3123

Malicious code in bioql PyPI...

EUVD-2025-6690

Malicious code in bioql PyPI...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...

CVE-2025-56162

YOSHOP 2.0 is vulnerable to an unauthenticated SQL injection due to improper neutralization of special elements in the goodsIds parameter of the /api/goods/listByIds endpoint. The root cause is the getListByIds function, which concatenates user-supplied input into the orderRaw('field(goods_id, .....

SUSE CVE-2025-59044

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Himmelblau 0.9.x derives numeric GIDs for Entra ID groups from the group display name when himmelblau.conf idattrmap = name the default configuration. Because Microsoft Entra ID allows multiple groups with the same...

WestJet Confirms Passenger IDs and Passports Stolen in Cyberattack

WestJet confirms a data breach starting June 13, 2025, stole passport/ID and personal data. Credit cards and passwords are safe. The airline offers 24 months of free identity monitoring, including $1M insurance...

CVE-2025-59147: Improperly Implemented Security Check for Standard

Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Versions 7.0.11 and below, as well as 8.0.0, are vulnerable to detection bypass when crafted traffic sends multiple SYN packets with different sequence numbers with...

Splunk Cloud Platform和Splunk Enterprise 访问控制错误漏洞

Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. An access control error vulnerability exists i...