EUVD-2023-23672

Malicious code in bioql PyPI...

EUVD-2021-30412

Malicious code in bioql PyPI...

EUVD-2023-34267

Malicious code in bioql PyPI...

EUVD-2023-34871

Malicious code in bioql PyPI...

EUVD-2025-20322

Malicious code in bioql PyPI...

EUVD-2022-24824

Malicious code in bioql PyPI...

EUVD-2022-52129

Malicious code in bioql PyPI...

EUVD-2025-25492

Malicious code in bioql PyPI...

EUVD-2023-57364

Malicious code in bioql PyPI...

EUVD-2023-12362

Malicious code in bioql PyPI...

EUVD-2025-29724

Malicious code in bioql PyPI...

EUVD-2023-23729

Malicious code in bioql PyPI...

EUVD-2025-29547

Malicious code in bioql PyPI...

EUVD-2023-23327

Malicious code in bioql PyPI...

EUVD-2023-34107

Malicious code in bioql PyPI...

CVE-2025-59739

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in...

CVE-2025-40989

Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/projectmessage/add/xxx", affecting to "message" parameter via POST. This vulnerability could allow a remote attacker to send a speciall...

CVE-2025-11038 itsourcecode Online Clinic Management System details.php sql injection

A weakness has been identified in itsourcecode Online Clinic Management System 1.0. Affected is an unknown function of the file /details.php?action=post. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available t...

PT-2025-38745

Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.5.11 Description A flaw exists in the newsletter subscription functionality that permits unauthorized user unsubscription. An attacker can manipulate the force unsubscribe parameter in a POST request to the...

CVE-2025-40678 Unrestricted upload vulnerability for dangerous file types on Summar Software´s Portal del Empleado

Unrestricted upload vulnerability for dangerous file types on Summar Software´s Portal del Empleado. This vulnerability allows an attacker to upload a dangerous file type by sending a POST request using the parameter “cctl00$ContentPlaceHolder1$fuAdjunto” in “/MemberPages/ntfabsentismo.aspx”...