EUVD-2021-30034

Malicious code in bioql PyPI...

EUVD-2021-32090

Malicious code in bioql PyPI...

EUVD-2021-8001

Malicious code in bioql PyPI...

EUVD-2021-7994

Malicious code in bioql PyPI...

EUVD-2024-54228

Malicious code in bioql PyPI...

EUVD-2023-36975

Malicious code in bioql PyPI...

EUVD-2024-35291

Malicious code in bioql PyPI...

EUVD-2025-1839

Malicious code in bioql PyPI...

EUVD-2024-33346

Malicious code in bioql PyPI...

EUVD-2025-2118

Malicious code in bioql PyPI...

EUVD-2024-27286

Malicious code in bioql PyPI...

EUVD-2024-16059

Malicious code in bioql PyPI...

EUVD-2024-16206

Malicious code in bioql PyPI...

EUVD-2025-23037

Malicious code in bioql PyPI...

EUVD-2025-21927

Malicious code in bioql PyPI...

CVE-2013-10051

A remote PHP code execution vulnerability exists in InstantCMS version 1.6 and earlier due to unsafe use of eval within the search view handler. Specifically, user-supplied input passed via the look parameter is concatenated into a PHP expression and executed without proper sanitation. A remote...

CVE-2013-10051

A remote PHP code execution vulnerability exists in InstantCMS version 1.6 and earlier due to unsafe use of eval within the search view handler. Specifically, user-supplied input passed via the look parameter is concatenated into a PHP expression and executed without proper sanitation. A remote...

CVE-2013-10051 InstantCMS <= 1.6 Remote PHP Code Execution

A remote PHP code execution vulnerability exists in InstantCMS version 1.6 and earlier due to unsafe use of eval within the search view handler. Specifically, user-supplied input passed via the look parameter is concatenated into a PHP expression and executed without proper sanitation. A remote...

CVE-2013-10051

InstantCMS

CVE-2025-45346

Bacula-Web versions prior to v.9.7.1 are vulnerable to a time-based blind SQL injection flaw in the jobfiles endpoint. The root cause is improper input sanitization within the getJobFiles function in the application/Table/JobFileTable.php file. A remote attacker can exploit this by sending a craf...