EUVD-2022-40385

Malicious code in bioql PyPI...

EUVD-2022-42791

Malicious code in bioql PyPI...

EUVD-2023-23327

Malicious code in bioql PyPI...

EUVD-2023-34107

Malicious code in bioql PyPI...

EUVD-2025-14301

Malicious code in bioql PyPI...

EUVD-2021-30384

Malicious code in bioql PyPI...

EUVD-2023-23635

Malicious code in bioql PyPI...

EUVD-2023-44272

Malicious code in bioql PyPI...

EUVD-2022-52129

Malicious code in bioql PyPI...

EUVD-2025-23370

Malicious code in bioql PyPI...

EUVD-2023-34268

Malicious code in bioql PyPI...

EUVD-2023-24148

Malicious code in bioql PyPI...

EUVD-2023-57364

Malicious code in bioql PyPI...

EUVD-2022-34890

Malicious code in bioql PyPI...

CVE-2025-59739

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in...

CVE-2025-40989

Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/projectmessage/add/xxx", affecting to "message" parameter via POST. This vulnerability could allow a remote attacker to send a speciall...

CVE-2025-11038 itsourcecode Online Clinic Management System details.php sql injection

A weakness has been identified in itsourcecode Online Clinic Management System 1.0. Affected is an unknown function of the file /details.php?action=post. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available t...

PT-2025-38745

Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.5.11 Description A flaw exists in the newsletter subscription functionality that permits unauthorized user unsubscription. An attacker can manipulate the force unsubscribe parameter in a POST request to the...

CVE-2025-40678 Unrestricted upload vulnerability for dangerous file types on Summar Software´s Portal del Empleado

Unrestricted upload vulnerability for dangerous file types on Summar Software´s Portal del Empleado. This vulnerability allows an attacker to upload a dangerous file type by sending a POST request using the parameter “cctl00$ContentPlaceHolder1$fuAdjunto” in “/MemberPages/ntfabsentismo.aspx”...

CVE-2025-10592

CVE-2025-10592 affects itsourcecode Online Public Access Catalog OPAC 1.0. the vulnerability resides in the mysearch.php POST Parameter Handler where manipulating search_field/search_text enables SQL injection. exploitation appears remote and publicly disclosed; multiple sources corroborate an SQ...