EUVD-2024-1938

Malicious code in bioql PyPI...

EUVD-2023-34262

Malicious code in bioql PyPI...

EUVD-2022-1817

Malicious code in bioql PyPI...

EUVD-2025-4664

Malicious code in bioql PyPI...

EUVD-2024-2287

Malicious code in bioql PyPI...

EUVD-2022-44594

Malicious code in bioql PyPI...

EUVD-2024-1709

Malicious code in bioql PyPI...

EUVD-2022-33203

Malicious code in bioql PyPI...

EUVD-2024-2375

Malicious code in bioql PyPI...

EUVD-2025-21409

Malicious code in bioql PyPI...

EUVD-2025-0183

Malicious code in bioql PyPI...

EUVD-2024-3503

Malicious code in bioql PyPI...

EUVD-2022-41160

Malicious code in bioql PyPI...

EUVD-2023-2748

Malicious code in bioql PyPI...

CVE-2025-34227 Nagios XI < 2026R1 Configuration Wizard Authenticated Command Injection

Nagios XI 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system...

CVE-2025-10770 jeecgboot JimuReport MySQL JDBC testConnection deserialization

A vulnerability was found in jeecgboot JimuReport up to 2.1.2. This impacts an unknown function of the file /drag/onlDragDataSource/testConnection of the component MySQL JDBC Handler. Performing manipulation results in deserialization. Remote exploitation of the attack is possible. The exploit ha...

SUSE CVE-2025-9943

An SQL injection vulnerability has been identified in the "ID" attribute of the SAML response when the replay cache of the Shibboleth Service Provider SP is configured to use an SQL database as storage service. An unauthenticated attacker can exploit this issue via blind SQL injection, allowing f...

CVE-2025-58443 FOG's authentication bypass leads to full SQL DB dump

FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a full SQL DB without credentials. A fix is...

CVE-2025-58443

Overview: CVE-2025-58443 affects FOGProject in versions ≤ 1.5.10.1673, with an authentication bypass that enables unauthenticated access and a full SQL database dump. What’s affected: Management/UI endpoints (notably /fog/management/export.php and related paths) exposing database contents and pot...

CVE-2025-9273

CData API Server MySQL Misconfiguration Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of CData API Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the...