EUVD-2025-17655

Malicious code in bioql PyPI...

EUVD-2025-20462

Malicious code in bioql PyPI...

EUVD-2025-19562

Malicious code in bioql PyPI...

EUVD-2025-20460

Malicious code in bioql PyPI...

EUVD-2024-50259

Malicious code in bioql PyPI...

EUVD-2025-20463

Malicious code in bioql PyPI...

EUVD-2025-17652

Malicious code in bioql PyPI...

EUVD-2025-22994

Malicious code in bioql PyPI...

EUVD-2023-33297

Malicious code in bioql PyPI...

EUVD-2023-33272

Malicious code in bioql PyPI...

EUVD-2025-1930

Malicious code in bioql PyPI...

EUVD-2025-2139

Malicious code in bioql PyPI...

EUVD-2025-16863

Malicious code in bioql PyPI...

EUVD-2025-11426

Malicious code in bioql PyPI...

EUVD-2025-11434

Malicious code in bioql PyPI...

CVE-2025-57423: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Content, GroupName, PersonName, lastUpdate, pool, and title. Due to insufficient input sanitisation, an unauthenticated remote attacker could inject arbitrary SQL commands via a...

CVE-2025-59743

SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'SessionID' cookie in '/inc/connect/CONNECTION.ASP'...

PT-2025-39362

Name of the Vulnerable Software and Affected Versions Prevengos version 2.44 Description A SQL injection issue exists in Prevengos version 2.44 by Nedatec Consulting. This allows an attacker to retrieve, create, update, and delete databases. The issue is triggered by sending a POST request to the...

CVE-2025-40677: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Summar Software´s Portal del Empleado. This vulnerability allows an attacker to retrieve, create, update, and delete the database by sending a POST request using the parameter “ctl00$ContentPlaceHolder1$filtroNombre” in “/MemberPages/quienesquien.aspx”...

CVE-2025-40687

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'mobilenumber', 'teamleadname' and 'teammember' parameters in the endpoint '/ofrs/admin/add-team.php'...