EUVD-2022-28635

Malicious code in bioql PyPI...

EUVD-2025-13906

Malicious code in bioql PyPI...

EUVD-2024-2279

Malicious code in bioql PyPI...

EUVD-2023-46282

Malicious code in bioql PyPI...

EUVD-2021-32183

Malicious code in bioql PyPI...

EUVD-2021-30954

Malicious code in bioql PyPI...

EUVD-2021-30955

Malicious code in bioql PyPI...

EUVD-2021-30953

Malicious code in bioql PyPI...

EUVD-2022-46518

Malicious code in bioql PyPI...

EUVD-2025-22548

Malicious code in bioql PyPI...

EUVD-2024-25114

Malicious code in bioql PyPI...

PT-2025-40452

Name of the Vulnerable Software and Affected Versions MyClub version 0.5 Description A SQL injection issue exists in MyClub version 0.5. Insufficient input sanitisation in the /articles API endpoint allows an unauthenticated remote attacker to inject arbitrary SQL commands via a crafted GET...

CVE-2025-61603: Improper Neutralization of Special Elements used in an SQL Command

WeGIA is a Web manager for charitable institutions. Versions 3.4.12 and below include an SQL Injection vulnerability which was identified in the /controle/control.php endpoint, specifically in the descricao parameter. This vulnerability allows attackers to execute arbitrary SQL commands,...

CVE-2025-61605: Improper Neutralization of Special Elements used in an SQL Command

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an SQL Injection vulnerability which was identified in the /pet/profilepet.php endpoint, specifically in the idpet parameter. This vulnerability allows attackers to execute arbitrary SQL...

CVE-2025-57761: Improper Neutralization of Special Elements used in an SQL Command

WeGIA is a Web manager for charitable institutions. Prior to 3.4.10, there is a SQL Injection vulnerability in the /html/funcionario/dependenteremover.php endpoint, specifically in the idfuncionario parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the...

📄 Easy Hosting Control Panel 20.04.1.b SQL Injection

Easy Hosting Control Panel version 20.04.1.b suffers from a remote SQL injection vulnerability in the listdomains function via the arananalan POST parameter. Title: Easy Hosting Control Panel EHCP 20.04.1.b - SQL Injection in the listdomains function via the arananalan POST parameter Description:...

CVE-2025-55167: Improper Neutralization of Special Elements used in an SQL Command

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a SQL Injection vulnerability was identified in the /html/funcionario/dependenteremover.php endpoint, specifically in the iddependente parameter. This vulnerability...

CVE-2025-55168: Improper Neutralization of Special Elements used in an SQL Command

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a SQL Injection vulnerability was identified in the /html/saude/aplicarmedicamento.php endpoint, specifically in the idfichamedica parameter. This vulnerability allows...

CVE-2025-54379

LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability in the getLast API functionality of the eKuiper project. This flaw allows unauthenticated remote...

CVE-2025-54379

LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability in the getLast API functionality of the eKuiper project. This flaw allows unauthenticated remote...