EUVD-2025-31158

Malicious code in bioql PyPI...

CVE-2025-59816

This vulnerability allows attackers to directly query the underlying database, potentially retrieving all data stored in the Billing Admin database, including user credentials. User passwords are stored in plaintext, significantly increasing the severity of this issue...

CVE-2025-59816 Authenticated Union based SQL-injection in the search input field

This vulnerability allows attackers to directly query the underlying database, potentially retrieving all data stored in the Billing Admin database, including user credentials. User passwords are stored in plaintext, significantly increasing the severity of this issue...

CVE-2025-59816

CVE-2025-59816 affects Zenitel ICX500/ICX510 Billing Admin endpoint. Affects the Billing Admin component where attackers can query the underlying database directly, potentially retrieving all data including plaintext passwords. Root cause: database query exposure via the Billing Admin interface. ...

CVE-2025-59814

CVE-2025-59814 affects Zenitel ICX500/ICX510 Gateway Billing Admin endpoint, enabling unauthorized access to read the Billing Admin database. Multiple connected sources corroborate a vulnerability in the Billing Admin area, with impact described as reading the entire database contents. The NCSC a...