EUVD-2022-28901

Malicious code in bioql PyPI...

EUVD-2025-23889

Malicious code in bioql PyPI...

EUVD-2025-13582

Malicious code in bioql PyPI...

EUVD-2023-34145

Malicious code in bioql PyPI...

EUVD-2024-33902

Malicious code in bioql PyPI...

EUVD-2023-48199

Malicious code in bioql PyPI...

EUVD-2025-2019

Malicious code in bioql PyPI...

EUVD-2024-50779

Malicious code in bioql PyPI...

EUVD-2025-4854

Malicious code in bioql PyPI...

EUVD-2022-35227

Malicious code in bioql PyPI...

EUVD-2024-27537

Malicious code in bioql PyPI...

EUVD-2022-1676

Malicious code in bioql PyPI...

CVE-2025-9199: Improper Neutralization of Special Elements used in an SQL Command

The Woo superb slideshow transition gallery with random effect plugin for WordPress is vulnerable to SQL Injection via the 'woo-superb-slideshow' shortcode in all versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

CVE-2025-52041: Improper Neutralization of Special Elements used in an SQL Command

In Frappe ERPNext 15.57.5, the function getstockbalancefor at erpnext/stock/doctype/stockreconciliation/stockreconciliation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the inventorydimensionsdict parameter...

CVE-2025-52043: Improper Neutralization of Special Elements used in an SQL Command

In Frappe ERPNext v15.57.5, the function importcoa at erpnext/accounts/doctype/chartofaccountsimporter/chartofaccountsimporter.py is vulnerable to SQL injection, which allows an attacker to extract all information from databases by injecting a SQL query into the company parameter...

E-Commerce Website pages/admin_product_details.php file SQL Injection Vulnerability

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the pages/adminproductdetails.php file that does not perform security filtering on the prodid parameter. An attacker can exploit this vulnerability by manipulating the...

CVE-2025-10037: Improper Neutralization of Special Elements used in an SQL Command

The Featured Image from URL FIFU plugin for WordPress is vulnerable to SQL Injection via the getpostswithinternalfeaturedimage function in all versions up to, and including, 5.2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

CVE-2025-52048

In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function addtag at "frappe/desk/doctype/tag/tag.py" is vulnerable to SQL Injection, which allows an attacker to extract information from databases by injecting a SQL query into the "dt" parameter...

CVE-2025-29992

Mahara before 24.04.9 exposes database connection information if the database becomes unreachable, e.g., due to the database server being temporarily down or too busy...

CVE-2025-52085

An SQL injection vulnerability in Yoosee application v6.32.4 allows authenticated users to inject arbitrary SQL queries via a request to a backend API endpoint. Successful exploitation enables extraction of sensitive database information, including but not limited to, the database server banner a...