CVE-2026-7144: Authorization Bypass Through User-Controlled Key

A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file updatepasswdprocess.php. The manipulation of the argument tempuser results in authorization bypass. The attack can be launched remotely. The exploit has been...

CVE-2026-7143: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/blockstatus.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and...

EUVD-2025-2046

Malicious code in bioql PyPI...

EUVD-2025-2047

Malicious code in bioql PyPI...

EUVD-2025-2063

Malicious code in bioql PyPI...

EUVD-2025-1894

Malicious code in bioql PyPI...

EUVD-2024-51261

Malicious code in bioql PyPI...

EUVD-2024-51206

Malicious code in bioql PyPI...

EUVD-2024-33985

Malicious code in bioql PyPI...

EUVD-2024-33708

Malicious code in bioql PyPI...

EUVD-2024-33385

Malicious code in bioql PyPI...

EUVD-2024-33371

Malicious code in bioql PyPI...

EUVD-2025-24664

Malicious code in bioql PyPI...

EUVD-2025-17320

Malicious code in bioql PyPI...

EUVD-2025-16434

Malicious code in bioql PyPI...

EUVD-2024-51229

Malicious code in bioql PyPI...

CVE-2025-8936 1000 Projects Sales Management System dordupdate.php sql injection

A vulnerability was determined in 1000 Projects Sales Management System 1.0. Affected by this issue is some unknown functionality of the file /superstore/dist/dordupdate.php. The manipulation of the argument select2 leads to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-8935

A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/custcmp.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...

CVE-2025-8933

A vulnerability was identified in 1000 Projects Sales Management System 1.0. This issue affects some unknown processing of the file /superstore/admin/sales.php. The manipulation of the argument ssalescat leads to cross site scripting. The attack may be initiated remotely. The exploit has been...

CVE-2025-8935 1000 Projects Sales Management System custcmp.php sql injection

A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /superstore/custcmp.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been...