EUVD-2025-17097

Malicious code in bioql PyPI...

EUVD-2025-17115

Malicious code in bioql PyPI...

EUVD-2025-24966

Malicious code in bioql PyPI...

EUVD-2025-25102

Malicious code in bioql PyPI...

EUVD-2025-15634

Malicious code in bioql PyPI...

EUVD-2024-33177

Malicious code in bioql PyPI...

EUVD-2025-2126

Malicious code in bioql PyPI...

EUVD-2025-4398

Malicious code in bioql PyPI...

EUVD-2025-7416

Malicious code in bioql PyPI...

EUVD-2025-31445

Malicious code in bioql PyPI...

EUVD-2025-17585

Malicious code in bioql PyPI...

EUVD-2025-14098

Malicious code in bioql PyPI...

EUVD-2025-24829

Malicious code in bioql PyPI...

CVE-2025-11069

A vulnerability was determined in westboy CicadasCMS 1.0. Affected by this issue is some unknown functionality of the file /system/org/save of the component Add Department Handler. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotel...

CVE-2025-11139

A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. This manipulation of the argument filepath causes path traversal. Remote exploitation of the attack is possible. The exploit has...

PT-2025-39806

Name of the Vulnerable Software and Affected Versions mirweiye wenkucms versions up to 3.4 Description A flaw exists that allows for remote operating system command injection. This occurs due to manipulation of the createPathOne function within the app/common/common.php file. The exploit has been...

CVE-2025-11076

A vulnerability was found in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/editteacher.php. Performing manipulation of the argument department results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

CVE-2025-11097

CVE-2025-11097 affects D-Link DIR-823X firmware 250416. The root cause is a command injection in the /goform/set_device_name handler caused by manipulating the mac parameter. The vulnerability is exploitable remotely and has been publicly disclosed. Multiple sources (NVD, Red Hat, CNVD, CNVD) cor...

PT-2025-39788

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A buffer overflow issue exists in the formWrlExtraGet function of the /goform/GstDhcpSetSer file. Manipulation of the dips argument can trigger this issue, allowing for remote exploitation. A public explo...

CVE-2025-11039

A security vulnerability has been detected in Campcodes Computer Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/usedit1.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. Th...