EUVD-2024-47084

Malicious code in bioql PyPI...

EUVD-2022-27450

Malicious code in bioql PyPI...

EUVD-2023-0312

Malicious code in bioql PyPI...

EUVD-2024-30358

Malicious code in bioql PyPI...

EUVD-2023-58378

Malicious code in bioql PyPI...

EUVD-2025-26007

Malicious code in bioql PyPI...

EUVD-2024-19757

Malicious code in bioql PyPI...

EUVD-2025-22023

Malicious code in bioql PyPI...

RLSA-2025:14592 Important: aide security update

Advanced Intrusion Detection Environment AIDE is a utility that creates a database of files on the system, and then uses that database to ensure file integrity and detect system intrusions. Security Fixes: aide: improper output neutralization enables bypassing CVE-2025-54389 For more details abou...

aide security update

An update is available for aide. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Advanced Intrusion Detection Environment AIDE is a utility that creates a...

CVE-2025-0876

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Isin Basi Advertisement Information Technologies Trade Inc. IT's Workif allows Cross-Site Scripting XSS. This issue affects IT's Workif: through 20251003. NOTE: The vendor was contacted earl...

Netsis Panel SQL注入漏洞

Netsis Panel is a front-end page for an enterprise resource planning, business management, and other systems from Netsis Turkey. A SQL injection vulnerability exists in Netsis Panel 20251003 and earlier versions, which stems from improper neutralization of special elements and can lead to SQL...

Workif 跨站脚本漏洞

Workif is a customer tracking management software from Workif Turkey. A cross-site scripting vulnerability exists in Workif 20251003 and earlier versions, which stems from improper input neutralization and could lead to cross-site scripting attacks...

CVE-2024-13150

CVE-2024-13150 describes an SQL Injection in Fayton Software and Consulting Services fayton.Pro ERP. The vulnerability arises from improper neutralization of special elements in SQL commands, enabling potential unauthorized access to the full database. Affected product is fayton.Pro ERP (through ...

Chef Software Chef Automate SQL注入漏洞

Chef Software Chef Automate is an automation platform from Chef Software for automating and managing infrastructure, applications, and compliance to help organizations achieve continuous delivery, automated operations, and security compliance. A SQL injection vulnerability exists in Chef Software...

CVE-2025-59937: Improper Neutralization of Argument Delimiters in a Command

go-mail is a comprehensive library for sending mails with Go. In versions 0.7.0 and below, due to incorrect handling of the mail.Address values when a sender- or recipient address is passed to the corresponding MAIL FROM or RCPT TO commands of the SMTP client, there is a possibility of wrong...

Fayton fayton.pro ERP SQL注入漏洞

Fayton fayton.pro ERP is an enterprise resource planning system from Fayton, Turkey. A SQL injection vulnerability exists in Fayton fayton.pro ERP 20250929 and earlier versions, which stems from improper neutralization of special elements and can lead to SQL injection attacks...

CVE-2025-60138

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sonalsinha21 SKT Blocks skt-blocks allows Stored XSS.This issue affects SKT Blocks: from n/a through = 2.6...

CVE-2025-60163

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Robin W bbp topic count bbp-topic-count allows DOM-Based XSS.This issue affects bbp topic count: from n/a through = 3.2...

CVE-2025-6396 XSS in Webbeyaz's web site

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Webbeyaz Website Design Website Software allows Cross-Site Scripting XSS. This issue affects Website Software: through 2025.07.14...