2528 matches found
EUVD-2011-3232
Malicious code in bioql PyPI...
EUVD-2021-9080
Malicious code in bioql PyPI...
EUVD-2025-29523
Malicious code in bioql PyPI...
EUVD-2024-40268
Malicious code in bioql PyPI...
EUVD-2025-32290
Malicious code in bioql PyPI...
EUVD-2022-0929
Malicious code in bioql PyPI...
EUVD-2021-9079
Malicious code in bioql PyPI...
EUVD-2023-43016
Malicious code in bioql PyPI...
EUVD-2025-22995
Malicious code in bioql PyPI...
EUVD-2022-28024
Malicious code in bioql PyPI...
EUVD-2022-28035
Malicious code in bioql PyPI...
EUVD-2023-29543
Malicious code in bioql PyPI...
EUVD-2022-0042
Malicious code in bioql PyPI...
EUVD-2023-28096
Malicious code in bioql PyPI...
EUVD-2025-20074
Malicious code in bioql PyPI...
CVE-2025-10547 CVE-2025-10547
An uninitialized variable in the HTTP CGI request arguments processing component of Vigor Routers running DrayOS may allow an attacker the ability to perform RCE on the appliance through memory corruption...
PYSEC-2025-106
An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...
Windows Shortcut (LNK) Padding
This module generates Windows LNK shortcut file that can execute arbitrary commands. The LNK file uses environment variables and execute its arguments from COMMANDLINEARGUMENTS with extra juicy whitespace character padding bytes and concatenates the actual payload. Module Options msf use...
PT-2025-40290
Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.25 Django versions 5.1 through 5.1.13 Django versions 5.2 through 5.2.7 Description A SQL injection issue exists in Django’s QuerySet methods—specifically annotate, alias, aggregate, and extra—when using a craft...
CVE-2025-59681
An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...