EUVD-2022-27513

Malicious code in bioql PyPI...

EUVD-2024-46727

Malicious code in bioql PyPI...

EUVD-2023-32351

Malicious code in bioql PyPI...

EUVD-2025-9690

Malicious code in bioql PyPI...

EUVD-2024-43953

Malicious code in bioql PyPI...

EUVD-2024-27539

Malicious code in bioql PyPI...

EUVD-2025-4854

Malicious code in bioql PyPI...

EUVD-2025-13582

Malicious code in bioql PyPI...

EUVD-2024-50215

Malicious code in bioql PyPI...

EUVD-2024-50779

Malicious code in bioql PyPI...

EUVD-2023-48199

Malicious code in bioql PyPI...

EUVD-2022-28901

Malicious code in bioql PyPI...

EUVD-2024-35359

Malicious code in bioql PyPI...

CVE-2025-9199: Improper Neutralization of Special Elements used in an SQL Command

The Woo superb slideshow transition gallery with random effect plugin for WordPress is vulnerable to SQL Injection via the 'woo-superb-slideshow' shortcode in all versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

CVE-2025-52041: Improper Neutralization of Special Elements used in an SQL Command

In Frappe ERPNext 15.57.5, the function getstockbalancefor at erpnext/stock/doctype/stockreconciliation/stockreconciliation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the inventorydimensionsdict parameter...

CVE-2025-52043: Improper Neutralization of Special Elements used in an SQL Command

In Frappe ERPNext v15.57.5, the function importcoa at erpnext/accounts/doctype/chartofaccountsimporter/chartofaccountsimporter.py is vulnerable to SQL injection, which allows an attacker to extract all information from databases by injecting a SQL query into the company parameter...

E-Commerce Website pages/admin_product_details.php file SQL Injection Vulnerability

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the pages/adminproductdetails.php file that does not perform security filtering on the prodid parameter. An attacker can exploit this vulnerability by manipulating the...

CVE-2025-10037: Improper Neutralization of Special Elements used in an SQL Command

The Featured Image from URL FIFU plugin for WordPress is vulnerable to SQL Injection via the getpostswithinternalfeaturedimage function in all versions up to, and including, 5.2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2025-29992

Mahara before 24.04.9 exposes database connection information if the database becomes unreachable, e.g., due to the database server being temporarily down or too busy...

CVE-2025-52085

An SQL injection vulnerability in Yoosee application v6.32.4 allows authenticated users to inject arbitrary SQL queries via a request to a backend API endpoint. Successful exploitation enables extraction of sensitive database information, including but not limited to, the database server banner a...