EUVD-2025-15543

Malicious code in bioql PyPI...

EUVD-2025-28753

Malicious code in bioql PyPI...

EUVD-2024-43297

Malicious code in bioql PyPI...

EUVD-2022-39399

Malicious code in bioql PyPI...

EUVD-2022-39402

Malicious code in bioql PyPI...

EUVD-2025-28878

Malicious code in bioql PyPI...

EUVD-2024-16737

Malicious code in bioql PyPI...

EUVD-2023-35211

Malicious code in bioql PyPI...

EUVD-2025-32017

Malicious code in bioql PyPI...

EUVD-2023-39125

Malicious code in bioql PyPI...

EUVD-2022-39389

Malicious code in bioql PyPI...

EUVD-2024-53539

Malicious code in bioql PyPI...

CVE-2025-52041

In Frappe ERPNext 15.57.5, the function getstockbalancefor at erpnext/stock/doctype/stockreconciliation/stockreconciliation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the inventorydimensionsdict parameter...

CVE-2025-52041

In Frappe ERPNext 15.57.5, the function getstockbalancefor at erpnext/stock/doctype/stockreconciliation/stockreconciliation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the inventorydimensionsdict parameter...

CVE-2025-52041

In Frappe ERPNext 15.57.5, the function getstockbalancefor at erpnext/stock/doctype/stockreconciliation/stockreconciliation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the inventorydimensionsdict parameter...

PT-2025-40245

Name of the Vulnerable Software and Affected Versions Frappe ERPNext version 15.57.5 Description The get stock balance for function located at erpnext/stock/doctype/stock reconciliation/stock reconciliation.py is susceptible to SQL Injection. An attacker can inject a SQL query through the invento...

CVE-2025-52041

In Frappe ERPNext 15.57.5, the function getstockbalancefor at erpnext/stock/doctype/stockreconciliation/stockreconciliation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the inventorydimensionsdict parameter...

CVE-2025-58267

Cross-Site Request Forgery CSRF vulnerability in Aftabul Islam Stock Message stock-message allows Stored XSS.This issue affects Stock Message: from n/a through = 1.1.0...

CVE-2025-58267

Cross-Site Request Forgery CSRF vulnerability in Aftabul Islam Stock Message stock-message allows Stored XSS.This issue affects Stock Message: from n/a through = 1.1.0...

WordPress Stock Message Plugin <= 1.1.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Stock Message versions = 1.1.0...