EUVD-2025-24665

Malicious code in bioql PyPI...

EUVD-2025-26810

Malicious code in bioql PyPI...

EUVD-2025-28249

Malicious code in bioql PyPI...

EUVD-2025-24716

Malicious code in bioql PyPI...

EUVD-2025-27433

Malicious code in bioql PyPI...

EUVD-2025-26293

Malicious code in bioql PyPI...

EUVD-2025-24981

Malicious code in bioql PyPI...

EUVD-2025-26247

Malicious code in bioql PyPI...

EUVD-2022-50654

Malicious code in bioql PyPI...

EUVD-2025-26267

Malicious code in bioql PyPI...

EUVD-2022-2197

Malicious code in bioql PyPI...

EUVD-2025-28062

Malicious code in bioql PyPI...

EUVD-2025-29033

Malicious code in bioql PyPI...

EUVD-2025-29144

Malicious code in bioql PyPI...

EUVD-2025-26278

Malicious code in bioql PyPI...

EUVD-2025-25012

Malicious code in bioql PyPI...

EUVD-2025-25749

Malicious code in bioql PyPI...

CVE-2025-9198 Wp cycle text announcement <= 8.1 - Authenticated (Contributor+) SQL Injection

The Wp cycle text announcement plugin for WordPress is vulnerable to SQL Injection via the 'cycle-text' shortcode in all versions up to, and including, 8.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it...

WordPress Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin <= 0.8.8.8 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Jarno Vos jarnovos in WordPress Plugin Blappsta Mobile App Plugin Your native, mobile iPhone App and Android App versions = 0.8.8.8...

CVE-2025-61605

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an SQL Injection vulnerability which was identified in the /pet/profilepet.php endpoint, specifically in the idpet parameter. This vulnerability allows attackers to execute arbitrary SQL...