987 matches found
EUVD-2025-29192
Malicious code in bioql PyPI...
EUVD-2023-2092
Malicious code in bioql PyPI...
EUVD-2021-33068
Malicious code in bioql PyPI...
EUVD-2021-8090
Malicious code in bioql PyPI...
EUVD-2023-12496
Malicious code in bioql PyPI...
EUVD-2025-30448
Malicious code in bioql PyPI...
EUVD-2023-41421
Malicious code in bioql PyPI...
EUVD-2023-37999
Malicious code in bioql PyPI...
EUVD-2022-42937
Malicious code in bioql PyPI...
EUVD-2025-32304
Malicious code in bioql PyPI...
EUVD-2023-41422
Malicious code in bioql PyPI...
EUVD-2025-25893
Malicious code in bioql PyPI...
EUVD-2023-43819
Malicious code in bioql PyPI...
EUVD-2025-27982
Malicious code in bioql PyPI...
CVE-2025-57423
A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Content, GroupName, PersonName, lastUpdate, pool, and title. Due to insufficient input sanitisation, an unauthenticated remote attacker could inject arbitrary SQL commands via a...
CVE-2025-57423
A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Content, GroupName, PersonName, lastUpdate, pool, and title. Due to insufficient input sanitisation, an unauthenticated remote attacker could inject arbitrary SQL commands via a...
CVE-2025-57423
A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Content, GroupName, PersonName, lastUpdate, pool, and title. Due to insufficient input sanitisation, an unauthenticated remote attacker could inject arbitrary SQL commands via a...
CVE-2025-57423
MyClub version 0.5 is susceptible to a SQL injection vulnerability in the /articles endpoint due to insufficient input sanitisation. An unauthenticated remote attacker can exploit this by sending a crafted GET request targeting the query parameters: Content, GroupName, PersonName, lastUpdate, poo...
CVE-2025-59535
DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1.0, arbitrary themes can be loaded through query parameters. If an installed theme had a vulnerability, even if it was not used on any page, this could be loaded on...
Dotnetnuke < 10.1.0 Loading unused themes on annonymous clients through query parameters (CVE-2025-59535)
According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.1.0. It is, therefore, affected by a vulnerability. - DNN formerly DotNetNuke is an open-source web content management platform CMS in the Microsoft ecosystem. Prior to version 10.1....