EUVD-2023-27883

Malicious code in bioql PyPI...

EUVD-2025-13835

Malicious code in bioql PyPI...

EUVD-2025-2985

Malicious code in bioql PyPI...

EUVD-2024-44907

Malicious code in bioql PyPI...

EUVD-2024-52552

Malicious code in bioql PyPI...

EUVD-2024-43411

Malicious code in bioql PyPI...

CVE-2025-9587

The CTL Behance Importer Lite WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

WordPress CTL Behance Importer Lite plugin <= 1.0 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin CTL Behance Importer Lite versions = 1.0...

Malicious Package

Overview com.unity.2d.psdimporter is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

CVE-2025-9587

The CTL Behance Importer Lite WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2025-9587 CTL Behance Importer Lite <= 1.0 - Unauthenticated SQL Injection

The CTL Behance Importer Lite WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

CVE-2025-9587

CVE-2025-9587 affects the WordPress plugin CTL Behance Importer Lite (versions up to 1.0). The vulnerability is a SQL injection caused by improper sanitization/escaping of a parameter before it is used in a SQL statement via an unauthenticated AJAX action. Multiple connected sources (Red Hat advi...

CVE-2025-9587 CTL Behance Importer Lite <= 1.0 - Unauthenticated SQL Injection

The CTL Behance Importer Lite WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection...

PT-2025-40322

Name of the Vulnerable Software and Affected Versions CTL Behance Importer Lite WordPress plugin versions through 1.0 Description The software does not properly sanitize and escape a parameter before using it in a SQL statement via an AJAX action. This allows for SQL injection, and the issue is...

PT-2025-39989

Name of the Vulnerable Software and Affected Versions Frappe ERPNext version 15.57.5 Description The import coa function located at erpnext/accounts/doctype/chart of accounts importer/chart of accounts importer.py is susceptible to SQL injection. An attacker can inject a SQL query through the...

CVE-2025-52043

In Frappe ERPNext v15.57.5, the function importcoa at erpnext/accounts/doctype/chartofaccountsimporter/chartofaccountsimporter.py is vulnerable to SQL injection, which allows an attacker to extract all information from databases by injecting a SQL query into the company parameter...

Malicious code in com.unity.2d.psdimporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 988ab6368c4a52337e54f822f3ec3a86cefa2611329d86d870b14d0168dcabc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-58914

Cross-Site Request Forgery CSRF vulnerability in Di Themes Di Themes Demo Site Importer di-themes-demo-site-importer allows Cross Site Request Forgery.This issue affects Di Themes Demo Site Importer: from n/a through = 1.2...

CVE-2025-58914

Cross-Site Request Forgery CSRF vulnerability in Di Themes Di Themes Demo Site Importer di-themes-demo-site-importer allows Cross Site Request Forgery.This issue affects Di Themes Demo Site Importer: from n/a through = 1.2...

CVE-2025-58914

CVE-2025-58914 describes a CSRF vulnerability in the WordPress plugin Di Themes Demo Site Importer , affecting versions up to 1.2 (the range includes from n/a to 1.2). The Connected documents confirm the vulnerability type (CSRF) and the affected software, but do not provide concrete remediation ...