EUVD-2025-14093

Malicious code in bioql PyPI...

EUVD-2025-14822

Malicious code in bioql PyPI...

EUVD-2022-35040

Malicious code in bioql PyPI...

EUVD-2025-13596

Malicious code in bioql PyPI...

EUVD-2025-14186

Malicious code in bioql PyPI...

EUVD-2025-30878

Malicious code in bioql PyPI...

EUVD-2022-35018

Malicious code in bioql PyPI...

EUVD-2025-9582

Malicious code in bioql PyPI...

EUVD-2025-14196

Malicious code in bioql PyPI...

EUVD-2025-14087

Malicious code in bioql PyPI...

EUVD-2025-1910

Malicious code in bioql PyPI...

EUVD-2022-34948

Malicious code in bioql PyPI...

EUVD-2024-47709

Malicious code in bioql PyPI...

EUVD-2025-13594

Malicious code in bioql PyPI...

CVE-2025-10851

A security flaw has been discovered in Campcodes Gym Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been released ...

CVE-2025-10851 Campcodes Gym Management System ajax.php sql injection

A security flaw has been discovered in Campcodes Gym Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been released ...

CVE-2025-10851 Campcodes Gym Management System ajax.php sql injection

A security flaw has been discovered in Campcodes Gym Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been released ...

CVE-2025-7049

The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 67.7.0 via the 'MJgmgtgmgtadduser' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...

CVE-2025-7049

CVE-2025-7049 affects the WordPress plugin WPGYM - Wordpress Gym Management System up to version 67.7.0 . The vulnerability is a Privilege Escalation via a missing validation on a user-controlled key in the function MJ_gmgt_gmgt_add_user , allowing authenticated users with Subscriber+ privileges ...

CVE-2025-7049 WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Privilege Escalation via Account Takeover

The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 67.7.0 via the 'MJgmgtgmgtadduser' function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...