EUVD-2022-4327

Malicious code in bioql PyPI...

EUVD-2025-13797

Malicious code in bioql PyPI...

EUVD-2024-36835

Malicious code in bioql PyPI...

EUVD-2022-44825

Malicious code in bioql PyPI...

EUVD-2023-56877

Malicious code in bioql PyPI...

EUVD-2024-46101

Malicious code in bioql PyPI...

EUVD-2023-50627

Malicious code in bioql PyPI...

EUVD-2023-49575

Malicious code in bioql PyPI...

EUVD-2024-29322

Malicious code in bioql PyPI...

EUVD-2022-36901

Malicious code in bioql PyPI...

EUVD-2023-56644

Malicious code in bioql PyPI...

EUVD-2024-37895

Malicious code in bioql PyPI...

EUVD-2022-41753

Malicious code in bioql PyPI...

EUVD-2022-48997

Malicious code in bioql PyPI...

EUVD-2023-51368

Malicious code in bioql PyPI...

AZL-68285 CVE-2025-46818 affecting package redis for versions less than 6.2.20-1

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions o...

SourceCodester Pet Grooming Management Software 跨站脚本漏洞

SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. A cross-site scripting vulnerability exists in SourceCodester Pet Grooming Management Software version 1.0, which stems from unverified input in the customer name field of the...

CVE-2025-59936 get-jwks poisoned JWKS cache allows post-fetch issuer validation bypass

get-jwks contains fetch utils for JWKS keys. In versions prior to 11.0.2, a vulnerability in get-jwks can lead to cache poisoning in the JWKS key-fetching mechanism. When the iss issuer claim is validated only after keys are retrieved from the cache, it is possible for cached keys from an...

CVE-2025-10828

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly an...

PT-2025-38706

Name of the Vulnerable Software and Affected Versions code-projects E-Commerce Website version 1.0 Description A flaw exists in code-projects E-Commerce Website 1.0 where manipulation of the user id argument in the file '/pages/admin account delete.php' can lead to SQL injection. This issue is...