CVE-2023-29154

SQL injection vulnerability exists in the CONPROSYS HMI System CHS versions prior to 3.5.3. A user who can access the affected product with an administrative privilege may execute an arbitrary SQL command via specially crafted input to the query setting page...

EUVD-2023-27675

Malicious code in bioql PyPI...

EUVD-2023-31643

Malicious code in bioql PyPI...

EUVD-2023-26502

Malicious code in bioql PyPI...

EUVD-2023-32456

Malicious code in bioql PyPI...

EUVD-2025-19656

Malicious code in bioql PyPI...

EUVD-2023-26536

Malicious code in bioql PyPI...

EUVD-2023-26497

Malicious code in bioql PyPI...

EUVD-2023-26494

Malicious code in bioql PyPI...

EUVD-2023-31165

Malicious code in bioql PyPI...

EUVD-2023-34216

Malicious code in bioql PyPI...

EUVD-2023-26487

Malicious code in bioql PyPI...

EUVD-2025-19659

Malicious code in bioql PyPI...

EUVD-2023-32351

Malicious code in bioql PyPI...

EUVD-2023-32095

Malicious code in bioql PyPI...

EUVD-2023-32318

Malicious code in bioql PyPI...

CVE-2025-34080

The Contec Co.,Ltd. CONPROSYS HMI System CHS is vulnerable to Cross-Site Scripting XSS in the getqsetting.php functionality that could allow reflected execution of scripts in the browser on interaction.This issue affects CONPROSYS HMI System CHS: before 3.7.7...

CVE-2025-34081

The Contec Co.,Ltd. CONPROSYS HMI System CHS exposes a PHP phpinfo debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System CHS: before 3.7.7...

Multiple vulnerabilities in Contec CONPROSYS HMI System (CHS)

Overview CONPROSYS HMI System CHS provided by Contec Co.,Ltd. contains multiple vulnerabilities listed below. Reflected cross-site scripting CWE-79 - CVE-2025-34080 Insertion of sensitive information into debugging code CWE-215 - CVE-2025-34081 Alex Williams of Converge Technology Solutions...

CVE-2025-34081

The Contec Co.,Ltd. CONPROSYS HMI System CHS exposes a PHP phpinfo debug page to unauthenticated users that may contain sensitive data useful for an attacker.This issue affects CONPROSYS HMI System CHS: before 3.7.7...