EUVD-2024-16199

Malicious code in bioql PyPI...

EUVD-2023-1442

Malicious code in bioql PyPI...

EUVD-2025-2883

Malicious code in bioql PyPI...

EUVD-2022-3602

Malicious code in bioql PyPI...

EUVD-2022-2584

Malicious code in bioql PyPI...

EUVD-2025-22908

Malicious code in bioql PyPI...

EUVD-2022-24379

Malicious code in bioql PyPI...

EUVD-2022-5970

Malicious code in bioql PyPI...

EUVD-2022-1420

Malicious code in bioql PyPI...

EUVD-2022-4214

Malicious code in bioql PyPI...

EUVD-2022-34393

Malicious code in bioql PyPI...

EUVD-2022-7079

Malicious code in bioql PyPI...

EUVD-2022-3344

Malicious code in bioql PyPI...

EUVD-2022-0701

Malicious code in bioql PyPI...

EUVD-2024-21085

Malicious code in bioql PyPI...

CVE-2025-59738 Multiple vulnerabilities in AndSoft's e-TMS

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRMBET.ASP'...

CVE-2025-56295

code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions...

Origin Validation Error

Overview @parcel/reporter-dev-server is a Blazing fast, zero configuration web application bundler Affected versions of this package are vulnerable to Origin Validation Error via improper origin validation in the development server. An attacker can access source code by tricking a developer into...

CVE-2025-56295

code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions...

CVE-2025-56295

CVE-2025-56295 affects the code-projects Computer Laboratory System 1.0. The issue is a file upload vulnerability in the avatar modification flow, where the upload feature does not restrict file types, enabling staff to upload malicious PHP backdoor files. This can be leveraged to establish a web...