CVE-2025-62939: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Open Currency Converter artiss-currency-converter allows Stored XSS.This issue affects Open Currency Converter: from n/a through = 1.5.0...

EUVD-2002-2312

Malware in sbrugna...

EUVD-2002-2074

Malware in sbrugna...

EUVD-2001-0289

Malware in sbrugna...

EUVD-2025-28336

Malicious code in bioql PyPI...

EUVD-2025-4877

Malicious code in bioql PyPI...

EUVD-2025-2850

Malicious code in bioql PyPI...

EUVD-2024-54926

Malicious code in bioql PyPI...

EUVD-2025-10621

Malicious code in bioql PyPI...

EUVD-2025-10623

Malicious code in bioql PyPI...

EUVD-2025-27401

Malicious code in bioql PyPI...

CVE-2025-58988

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Dolson My Tickets my-tickets allows Stored XSS.This issue affects My Tickets: from n/a through = 2.0.22...

PT-2025-36808

Name of the Vulnerable Software and Affected Versions: Joe Dolson My Tickets versions through 2.0.22 Description: The software contains an improper neutralization of input during web page generation, leading to a cross-site scripting XSS issue. This allows for stored XSS attacks. Recommendations:...

CVE-2025-58988: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Joe Dolson My Tickets my-tickets allows Stored XSS.This issue affects My Tickets: from n/a through = 2.0.22...

CVE-2024-13979

A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...

CVE-2024-13979

A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...

CVE-2024-13979 St. Joe ERP System SingleRowQueryConverter SQL Injection

A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...

CVE-2024-13979 St. Joe ERP System SingleRowQueryConverter SQL Injection

A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...

CVE-2024-13979

The St. Joe ERP system ("圣乔ERP系统") is vulnerable to a SQL injection flaw due to insufficient input sanitization when processing user-supplied data. Unauthenticated remote attackers can exploit this by sending crafted HTTP POST requests to the /login endpoint to execute arbitrary SQL commands. Suc...

CVE-2024-13979: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...