EUVD-2025-5446

Malicious code in bioql PyPI...

EUVD-2022-1130

Malicious code in bioql PyPI...

EUVD-2023-26735

Malicious code in bioql PyPI...

EUVD-2024-18435

Malicious code in bioql PyPI...

EUVD-2025-18997

Malicious code in bioql PyPI...

EUVD-2025-24458

Malicious code in bioql PyPI...

EUVD-2024-43182

Malicious code in bioql PyPI...

EUVD-2022-29960

Malicious code in bioql PyPI...

EUVD-2023-39026

Malicious code in bioql PyPI...

EUVD-2025-24107

Malicious code in bioql PyPI...

EUVD-2025-22414

Malicious code in bioql PyPI...

EUVD-2023-37540

Malicious code in bioql PyPI...

EUVD-2024-54558

Malicious code in bioql PyPI...

EUVD-2023-42956

Malicious code in bioql PyPI...

CVE-2025-59738

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRMBET.ASP'...

CVE-2025-59735

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRM.ASP'...

CVE-2025-59741

AndSoft e-TMS v25.03 suffers an OS command injection that can be triggered by sending a POST request to /CLT/LOGINERRORFRM.ASP with the m parameter. Multiple connected sources (CNVD-2025-23538, NVD/CVE-2025-59741, CNNVD-202510-331, PT-2025-40361) confirm the vulnerability exists and that an attac...

CVE-2025-59739

CVE-2025-59739 describes an OS command‑injection in AndSoft’s e‑TMS v25.03. The root cause is misuse of the m parameter in the request path /clt/LOGINFRM_original.ASP , exploitable via a POST to execute arbitrary commands on the server. Impact: potential full server compromise (as supported by CV...

CVE-2025-10659 MegaSys Enterprises Telenium Online Web Application OS Command Injection

The Telenium Online Web Application is vulnerable due to a PHP endpoint accessible to unauthenticated network users that improperly handles user-supplied input. This vulnerability occurs due to the insecure termination of a regular expression check within the endpoint. Because the input is not...

CVE-2025-10659 MegaSys Enterprises Telenium Online Web Application OS Command Injection

The Telenium Online Web Application is vulnerable due to a PHP endpoint accessible to unauthenticated network users that improperly handles user-supplied input. This vulnerability occurs due to the insecure termination of a regular expression check within the endpoint. Because the input is not...