EUVD-2007-6478

Malware in sbrugna...

EUVD-2024-3311

Malicious code in bioql PyPI...

EUVD-2024-17435

Malicious code in bioql PyPI...

EUVD-2024-35108

Malicious code in bioql PyPI...

EUVD-2024-17434

Malicious code in bioql PyPI...

EUVD-2024-3257

Malicious code in bioql PyPI...

EUVD-2024-27219

Malicious code in bioql PyPI...

EUVD-2024-1233

Malicious code in bioql PyPI...

EUVD-2024-27220

Malicious code in bioql PyPI...

EUVD-2022-32587

Malicious code in bioql PyPI...

EUVD-2024-17436

Malicious code in bioql PyPI...

php: Leak partial content of the heap through heap buffer over-read in mysqlnd

A flaw was found in the PHP MySQL client library. This vulnerability allows a hostile MySQL server to disclose the content of the client's heap, potentially exposing data from other SQL requests and other users of the same server via malicious server interactions...

PT-2025-30360 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: LibreNMS versions 25.6.0 and below Description: LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring system. Versions 25.6.0 and below contain an architectural vulnerability in the /ajax form.php endpoint that permits Remot...

CVE-2025-45065

CVE-2025-45065 concerns a SQL injection in the Loginerms.php endpoint of the Employee Record Management System in PHP and MySQL v1. The vulnerability affects the loginerms.php component, arising from insufficient input handling, allowing potentially arbitrary SQL execution. Impact as stated: high...

CVE-2024-27685

SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via a crafted payload to the $cshortname, $cfullname, and $cdate variables...

CVE-2024-47528

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. Stored Cross-Site Scripting XSS can be achieved by uploading a new Background for a Custom Map. Users with "admin" role can set background for a custom map, this allow the upload of SVG file that can contain XSS payload...

CVE-2024-30986

Cross Site Scripting vulnerability in /edit-services-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and via "price" and "sname" parameter...

CVE-2024-1702

A vulnerability was found in keerti1924 PHP-MYSQL-User-Login-System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /edit.php. The manipulation leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the publi...

CVE-2024-50352

LibreNMS is an open-source, PHP/MySQL/SNMP-based network monitoring system. A Stored Cross-Site Scripting XSS vulnerability in the "Services" section of the Device Overview page allows authenticated users to inject arbitrary JavaScript through the "name" parameter when adding a service to a devic...

CVE-2024-1701

A vulnerability has been found in keerti1924 PHP-MYSQL-User-Login-System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /edit.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been...