CVE-2025-40639 SQL injection in Eventobot

A SQL injection vulnerability has been found in Eventobot. This vulnerability allows an attacker to retrieve, create, update and delete databases through the 'promosend' parameter in the '/assets/php/calculatediscount.php'...

CVE-2025-40639 SQL injection in Eventobot

A SQL injection vulnerability has been found in Eventobot. This vulnerability allows an attacker to retrieve, create, update and delete databases through the 'promosend' parameter in the '/assets/php/calculatediscount.php'...

CVE-2025-40639

CVE-2025-40639 — Eventobot SQL injection is confirmed by connected sources. The vulnerability affects Eventobot and is exploitable via the promo_send parameter in the /assets/php/calculate_discount.php endpoint. The underlying issue allows an attacker to perform SQL operations including retrieve,...

JFlow 安全漏洞

JFlow is a low-code BPM development platform open-sourced by Jinan Chicheng opencc in China. JFlow has a security vulnerability, which stems from incorrect operations on the function Calculate in the file src/main/java/bp/wf/httphandler/WFCCForm.java, potentially leading to injection attacks...

PT-2026-24052

A vulnerability was identified in opencc JFlow up to 5badc00db382d7cb82dad231e6a866b18e0addfe. Affected by this vulnerability is the function Calculate of the file src/main/java/bp/wf/httphandler/WF CCForm.java. Such manipulation leads to injection. The attack may be performed from remote. The...

PT-2026-24051

Name of the Vulnerable Software and Affected Versions Eventobot affected versions not specified Description A SQL injection issue exists in Eventobot. This allows an attacker to retrieve, create, update, and delete databases. The issue is located in the '/assets/php/calculate discount.php' file...

CVE-2026-3813: Improper Neutralization of Special Elements in Output Used by a Downstream Component

A vulnerability was identified in opencc JFlow up to 5badc00db382d7cb82dad231e6a866b18e0addfe. Affected by this vulnerability is the function Calculate of the file src/main/java/bp/wf/httphandler/WFCCForm.java. Such manipulation leads to injection. The attack may be performed from remote. The...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993080)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993080 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes WHY When PTEBufferSizeInReques...

The vulnerability of the functions populate_dummy_dml_surface_cfg() and CalculateVMAndRowBytes() in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the populatedummydmlsurfacecfg and CalculateVMAndRowBytes functions in the Linux operating system’s kernel is related to a division by zero error. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the calculate_sizes() function in the mm/slub.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the calculatesizes function in the mm/slub.c module of the Linux kernel’s memory management subsystem is related to the writing of buffers outside of the system’s protected area. Exploiting this vulnerability could allow an attacker to damage memory resources or cause service...

Command Injection

Overview cli-onprem is a CLI tool for infrastructure engineers Affected versions of this package are vulnerable to Command Injection due to the use of shell-invoked subprocess calls with unvalidated input. An attacker can execute arbitrary commands by injecting shell metacharacters in the directo...

EUVD-2018-12764

Malware in sbrugna...

EUVD-2021-19288

Malware in sbrugna...

EUVD-2018-11192

Malware in sbrugna...

EUVD-2025-6967

Malicious code in bioql PyPI...

EUVD-2025-13774

Malicious code in bioql PyPI...

CVE-2025-10974

A vulnerability has been found in giantspatula SewKinect up to 7fd963ceb3385af3706af02b8a128a13399dffb1. This affects the function pickle.loads of the file /calculate of the component Endpoint. Such manipulation of the argument bodyparts/pointcloud leads to deserialization. The attack may be...

CVE-2025-10974

A vulnerability has been found in giantspatula SewKinect up to 7fd963ceb3385af3706af02b8a128a13399dffb1. This affects the function pickle.loads of the file /calculate of the component Endpoint. Such manipulation of the argument bodyparts/pointcloud leads to deserialization. The attack may be...

CVE-2025-10974 giantspatula SewKinect Endpoint calculate pickle.loads deserialization

A vulnerability has been found in giantspatula SewKinect up to 7fd963ceb3385af3706af02b8a128a13399dffb1. This affects the function pickle.loads of the file /calculate of the component Endpoint. Such manipulation of the argument bodyparts/pointcloud leads to deserialization. The attack may be...

CVE-2025-10974 giantspatula SewKinect Endpoint calculate pickle.loads deserialization

A vulnerability has been found in giantspatula SewKinect up to 7fd963ceb3385af3706af02b8a128a13399dffb1. This affects the function pickle.loads of the file /calculate of the component Endpoint. Such manipulation of the argument bodyparts/pointcloud leads to deserialization. The attack may be...