332 matches found
EUVD-2023-40510
Malicious code in bioql PyPI...
EUVD-2024-0189
Malicious code in bioql PyPI...
EUVD-2021-9291
Malicious code in bioql PyPI...
EUVD-2021-32236
Malicious code in bioql PyPI...
EUVD-2025-16667
Malicious code in bioql PyPI...
EUVD-2023-28682
Malicious code in bioql PyPI...
EUVD-2025-20565
Malicious code in bioql PyPI...
EUVD-2024-28053
Malicious code in bioql PyPI...
EUVD-2025-20296
Malicious code in bioql PyPI...
EUVD-2021-9295
Malicious code in bioql PyPI...
CVE-2025-27236
CVE-2025-27236 describes an information-disclosure vulnerability in Zabbix API. A regular Zabbix user can use user.get (via api_jsonrpc.php) to search for other users within their user group and retrieve fields that the requester should not access, enabling data-mining of restricted field values....
CVE-2025-10110
A vulnerability was identified in ChanCMS up to 3.3.1. Impacted is an unknown function of the file /search/. The manipulation with the input '%20or%201=1%20%23/words.html leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used...
CVE-2025-10110 ChanCMS search sql injection
A vulnerability was identified in ChanCMS up to 3.3.1. Impacted is an unknown function of the file /search/. The manipulation with the input '%20or%201=1%20%23/words.html leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used...
CVE-2025-10110 ChanCMS search sql injection
A vulnerability was identified in ChanCMS up to 3.3.1. Impacted is an unknown function of the file /search/. The manipulation with the input '%20or%201=1%20%23/words.html leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used...
CVE-2025-10110
ChanCMS
CVE-2025-10106 yanyutao0402 ChanCMS search sql injection
A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.1. This affects an unknown part of the file /cms/collect/search. Such manipulation of the argument keyword leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...
PT-2025-36520
Name of the Vulnerable Software and Affected Versions: ChanCMS versions prior to 3.3.2 Description: A SQL injection issue exists in ChanCMS. The vulnerability is located in the /search/ endpoint and can be triggered by manipulating the input with %20or%201=1%20%23/words.html. Remote exploitation ...
PT-2025-34107 · Undefined · Undefined
Spreecommerce versions prior to 0.50.x contain a remote command execution vulnerability in the API's search functionality. Improper input sanitation allows attackers to inject arbitrary shell commands via the searchinstance eval parameter, which is dynamically invoked using Ruby’s send method. Th...
Linux Distros Unpatched Vulnerability : CVE-2023-23612
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenSearch is an open source distributed and RESTful search engine. OpenSearch uses JWTs to store role claims obtained from the Identity Provider IdP when the...
