EUVD-2025-25385

Malicious code in bioql PyPI...

EUVD-2023-49160

Malicious code in bioql PyPI...

EUVD-2023-42688

Malicious code in bioql PyPI...

EUVD-2023-46789

Malicious code in bioql PyPI...

EUVD-2025-4135

Malicious code in bioql PyPI...

EUVD-2022-50837

Malicious code in bioql PyPI...

EUVD-2025-13617

Malicious code in bioql PyPI...

EUVD-2025-14876

Malicious code in bioql PyPI...

EUVD-2022-31182

Malicious code in bioql PyPI...

EUVD-2022-49370

Malicious code in bioql PyPI...

CVE-2025-59747

AndSoft e-TMS v25.03 is affected by a reflected XSS in the l parameter of /clt/resetPassword.asp. An attacker can cause JavaScript execution in a victim’s browser via a crafted URL. The vulnerability is consistently described across CVE/NVD/CNVD entries, with the attack vector tied to the l param...

AndSoft e-TMS 跨站脚本漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. A cross-site scripting vulnerability exists in AndSoft e-TMS, which stems from the lack of effective filtering and escaping of user-supplied data in the parameter l of /clt/resetPassword.asp, which can be exploited by an attacke...

PT-2025-40010

Name of the Vulnerable Software and Affected Versions Karthikg1908 Hospital Management System HMS version 1.0 Description An SQL injection issue exists in the user-login.php and index.php files. The application does not properly sanitize input before using it in SQL queries. This allows remote...

Project Monitoring System login.php File SQL Injection Vulnerability

Project Monitoring System is a project monitoring system. Project Monitoring System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameters username/password in the file /login.php. An attacker can exploit this...

D-Link DIR-823X 安全漏洞

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command execution vulnerability that can be exploited by an attacker to cause code execution due to the setcassword settings interface not filtering special characters in the httpcasswd parameter...

CVE-2025-10800

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. The impacted element is an unknown function of the file /index.php. Executing manipulation of the argument email/password can lead to sql injection. The attack can be executed remotely. The exploit has been made available...

CVE-2025-10800

The CVE affects itsourcecode Online Discussion Forum version 1.0, where an SQL injection can be triggered via manipulation of the email/password arguments in /index.php. The weakness is remote, with public exploit availability noted across sources. Impact is described as high/critical for confide...

itsourcecode Online Discussion Forum SQL注入漏洞

itsourcecode Online Discussion Forum is an online forum of itsourcecode open source. A SQL injection vulnerability exists in itsourcecode Online Discussion Forum version 1.0, which stems from incorrect manipulation of the parameters email/password in the file /index.php, which could lead to a SQL...

Vulnerability of the runtime.ddnsStatus() function in Linksys E5600 router microprogramming software, allowing a hacker to execute arbitrary commands

The vulnerability of the runtime.ddnsStatus function in Linksys E5600 router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system’s command for processing the password parameter. Exploiting this vulnerability allows a remot...

NeuVector 安全漏洞

NeuVector is an end-to-end container security platform from US-based NeuVector. The platform includes features such as image vulnerability management, access control and container process/filesystem protection. A security vulnerability exists in NeuVector that stems from the execution of Java...