EUVD-2022-46127

Malicious code in bioql PyPI...

EUVD-2025-19468

Malicious code in bioql PyPI...

EUVD-2025-7278

Malicious code in bioql PyPI...

EUVD-2025-6554

Malicious code in bioql PyPI...

EUVD-2025-31424

Malicious code in bioql PyPI...

EUVD-2022-41391

Malicious code in bioql PyPI...

EUVD-2025-31431

Malicious code in bioql PyPI...

EUVD-2025-4403

Malicious code in bioql PyPI...

EUVD-2025-30817

Malicious code in bioql PyPI...

EUVD-2025-31425

Malicious code in bioql PyPI...

EUVD-2025-31438

Malicious code in bioql PyPI...

EUVD-2025-29268

Malicious code in bioql PyPI...

EUVD-2025-22260

Malicious code in bioql PyPI...

EUVD-2025-30373

Malicious code in bioql PyPI...

EUVD-2025-6462

Malicious code in bioql PyPI...

PT-2025-40597

Name of the Vulnerable Software and Affected Versions OpenSupports versions 4.11.0 Description The application’s API endpoint, /api/staff/get-new-tickets, directly incorporates the user-supplied parameter departmentId into a SQL query without proper sanitization. This allows an authenticated staf...

OpenSupports SQL注入漏洞

OpenSupports is a simple open source ticketing platform from OpenSupports Open Source. An SQL injection vulnerability exists in OpenSupports version 4.11.0, which stems from directly splicing the user-controlled parameter departmentId into the SQL WHERE clause without using parameter binding, whi...

Sendit tricked kids, harvested their data, and faked messages, FTC claims

The Federal Trade Commission FTC has sued Sendit’s parent company, saying it signed up children under 13, collected their personal data, and misled them with fake messages and recurring bills. The lawsuit, filed against the app's owner Iconic Hearts Holdings Inc and CEO Hunter Rice, alleges the...

CVE-2025-11069

A vulnerability was determined in westboy CicadasCMS 1.0. Affected by this issue is some unknown functionality of the file /system/org/save of the component Add Department Handler. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotel...

CVE-2025-11076

A vulnerability was found in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/editteacher.php. Performing manipulation of the argument department results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...