EUVD-2022-24847

Malicious code in bioql PyPI...

EUVD-2024-53978

Malicious code in bioql PyPI...

EUVD-2024-31511

Malicious code in bioql PyPI...

EUVD-2022-4501

Malicious code in bioql PyPI...

EUVD-2024-0707

Malicious code in bioql PyPI...

EUVD-2025-7076

Malicious code in bioql PyPI...

EUVD-2024-52675

Malicious code in bioql PyPI...

EUVD-2024-48286

Malicious code in bioql PyPI...

EUVD-2024-35159

Malicious code in bioql PyPI...

EUVD-2024-16762

Malicious code in bioql PyPI...

EUVD-2022-42772

Malicious code in bioql PyPI...

EUVD-2021-27771

Malicious code in bioql PyPI...

EUVD-2024-51771

Malicious code in bioql PyPI...

EUVD-2025-7089

Malicious code in bioql PyPI...

E-Commerce Website admin_index_search.php file SQL injection vulnerability

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Search in the file /pages/adminindexsearch.php. An attacker can exploit this vulnerability t...

Linux Distros Unpatched Vulnerability : CVE-2024-32655

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Npgsql is the .NET data provider for PostgreSQL. The WriteBind method in src/Npgsql/Internal/NpgsqlConnector.FrontendMessages.cs uses int variables to store the...

Sports Management System mode.php File SQL Injection Vulnerability

Sports Management System a sports management system. The Sports Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter code in the file /Admin/mode.php. An attacker can exploit this vulnerability...

CVE-2025-54946

A SQL injection vulnerability in SUNNET Corporate Training Management System before 10.11 allows remote attackers to execute arbitrary SQL commands...

GHSA-FXGF-3XH6-M2PP Apache Superset has bypass of `DISALLOWED_SQL_FUNCTIONS` that allows execution of blocked SQL functions

A bypass of the DISALLOWEDSQLFUNCTIONS security feature in Apache Superset allows for the execution of blocked SQL functions. An attacker can use a special inline block to circumvent the denylist. This allows a user with SQL Lab access to execute functions that were intended to be disabled, leadi...

RLSA-2024:0974 Important: postgresql:12 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: non-owner 'REFRESH MATERIALIZED VIEW CONCURRENTLY' executes arbitrary SQL CVE-2024-0985 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and oth...