EUVD-2024-30564

Malicious code in bioql PyPI...

EUVD-2024-35847

Malicious code in bioql PyPI...

EUVD-2025-23940

Malicious code in bioql PyPI...

EUVD-2023-57693

Malicious code in bioql PyPI...

EUVD-2023-45864

Malicious code in bioql PyPI...

EUVD-2024-22106

Malicious code in bioql PyPI...

EUVD-2025-6160

Malicious code in bioql PyPI...

EUVD-2025-15790

Malicious code in bioql PyPI...

EUVD-2025-7962

Malicious code in bioql PyPI...

EUVD-2024-43471

Malicious code in bioql PyPI...

EUVD-2025-13723

Malicious code in bioql PyPI...

EUVD-2024-42561

Malicious code in bioql PyPI...

EUVD-2024-37895

Malicious code in bioql PyPI...

EUVD-2025-12061

Malicious code in bioql PyPI...

EUVD-2025-3358

Malicious code in bioql PyPI...

AZL-68285 CVE-2025-46818 affecting package redis for versions less than 6.2.20-1

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions o...

SourceCodester Pet Grooming Management Software 跨站脚本漏洞

SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. A cross-site scripting vulnerability exists in SourceCodester Pet Grooming Management Software version 1.0, which stems from unverified input in the customer name field of the...

CVE-2025-59936 get-jwks poisoned JWKS cache allows post-fetch issuer validation bypass

get-jwks contains fetch utils for JWKS keys. In versions prior to 11.0.2, a vulnerability in get-jwks can lead to cache poisoning in the JWKS key-fetching mechanism. When the iss issuer claim is validated only after keys are retrieved from the cache, it is possible for cached keys from an...

CVE-2025-10828

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly an...

PT-2025-38706

Name of the Vulnerable Software and Affected Versions code-projects E-Commerce Website version 1.0 Description A flaw exists in code-projects E-Commerce Website 1.0 where manipulation of the user id argument in the file '/pages/admin account delete.php' can lead to SQL injection. This issue is...