EUVD-2025-2139

Malicious code in bioql PyPI...

EUVD-2025-4160

Malicious code in bioql PyPI...

EUVD-2024-31508

Malicious code in bioql PyPI...

EUVD-2022-38975

Malicious code in bioql PyPI...

EUVD-2024-54626

Malicious code in bioql PyPI...

EUVD-2022-38484

Malicious code in bioql PyPI...

EUVD-2022-38485

Malicious code in bioql PyPI...

EUVD-2022-2953

Malicious code in bioql PyPI...

EUVD-2022-38974

Malicious code in bioql PyPI...

EUVD-2024-51953

Malicious code in bioql PyPI...

EUVD-2022-38480

Malicious code in bioql PyPI...

EUVD-2023-38600

Malicious code in bioql PyPI...

EUVD-2025-12715

Malicious code in bioql PyPI...

EUVD-2022-4385

Malicious code in bioql PyPI...

CVE-2025-52914

A vulnerability in the Suite Applications Services component of Mitel MiCollab 10.0 through SP1 FP1 10.0.1.101 could allow an authenticated attacker to conduct a SQL Injection attack due to insufficient validation of user input. A successful exploit could allow an attacker to execute arbitrary SQ...

eKuiper API endpoints handling SQL queries with user-controlled table names.

Summary A critical SQL Injection vulnerability exists in the getLast API functionality of the eKuiper project. This flaw allows unauthenticated remote attackers to execute arbitrary SQL statements on the underlying SQLite database by manipulating the table name input in an API request. Exploitati...

CVE-2025-54294

A SQLi vulnerability in Komento component 4.0.0-4.0.7for Joomla was discovered. The issue allows unprivileged users to execute arbitrary SQL commands...

CVE-2025-54294 Extension - stackideas.com - SQLi vulnerability in Komento component 4.0.0-4.0.7 for Joomla

A SQLi vulnerability in Komento component 4.0.0-4.0.7for Joomla was discovered. The issue allows unprivileged users to execute arbitrary SQL commands...

CVE-2025-50127

CVE-2025-50127 concerns the DJ-Flyer Joomla extension (component DJ-Flyer 1.0–3.2). The issue is a SQL injection vulnerability that allows privileged users to execute arbitrary SQL commands. Root cause is improper input handling in the vulnerable component, enabling crafted queries to reach the d...

SQL Injection

github.com/go-pg/pg is vulnerable to SQL injection. The vulnerability is due to improper handling of input in the /types/appendvalue.go component, which allows an attacker to inject and execute arbitrary SQL commands...