EUVD-2023-36357

Malicious code in bioql PyPI...

EUVD-2025-2495

Malicious code in bioql PyPI...

EUVD-2025-11017

Malicious code in bioql PyPI...

EUVD-2025-2553

Malicious code in bioql PyPI...

EUVD-2021-3212

Malicious code in bioql PyPI...

EUVD-2022-26499

Malicious code in bioql PyPI...

EUVD-2021-2927

Malicious code in bioql PyPI...

EUVD-2024-18881

Malicious code in bioql PyPI...

EUVD-2024-18989

Malicious code in bioql PyPI...

EUVD-2025-21518

Malicious code in bioql PyPI...

EUVD-2024-49490

Malicious code in bioql PyPI...

EUVD-2022-26475

Malicious code in bioql PyPI...

EUVD-2024-0657

Malicious code in bioql PyPI...

EUVD-2022-5289

Malicious code in bioql PyPI...

EUVD-2024-18995

Malicious code in bioql PyPI...

EUVD-2024-18985

Malicious code in bioql PyPI...

EUVD-2022-41871

Malicious code in bioql PyPI...

EUVD-2023-26183

Malicious code in bioql PyPI...

CVE-2025-9198 Wp cycle text announcement <= 8.1 - Authenticated (Contributor+) SQL Injection

The Wp cycle text announcement plugin for WordPress is vulnerable to SQL Injection via the 'cycle-text' shortcode in all versions up to, and including, 8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

GE UR family Improper Input Validation (CVE-2021-27418)

GE UR firmware versions prior to version 8.1x supports web interface with read-only access. The device fails to properly validate user input, making it possible to perform cross-site scripting attacks, which may be used to send a malicious script. Also, UR Firmware web server does not perform HTM...