EUVD-2023-38302

Malicious code in bioql PyPI...

EUVD-2022-29239

Malicious code in bioql PyPI...

EUVD-2025-7664

Malicious code in bioql PyPI...

EUVD-2022-53091

Malicious code in bioql PyPI...

EUVD-2022-45418

Malicious code in bioql PyPI...

EUVD-2024-1406

Malicious code in bioql PyPI...

EUVD-2025-20211

Malicious code in bioql PyPI...

EUVD-2024-26046

Malicious code in bioql PyPI...

EUVD-2024-32733

Malicious code in bioql PyPI...

EUVD-2023-1847

Malicious code in bioql PyPI...

EUVD-2024-26045

Malicious code in bioql PyPI...

EUVD-2022-36175

Malicious code in bioql PyPI...

EUVD-2023-3168

Malicious code in bioql PyPI...

EUVD-2025-9898

Malicious code in bioql PyPI...

EUVD-2022-52904

Malicious code in bioql PyPI...

EUVD-2022-52068

Malicious code in bioql PyPI...

EUVD-2022-43648

Malicious code in bioql PyPI...

EUVD-2022-52416

Malicious code in bioql PyPI...

CVE-2025-10037 Featured Image from URL (FIFU) <= 5.2.7 - Authenticated (Admin+) SQL Injection

The Featured Image from URL FIFU plugin for WordPress is vulnerable to SQL Injection via the getpostswithinternalfeaturedimage function in all versions up to, and including, 5.2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

The gix-transport crate before 0.36.1 for Rust allows command execution via the "gix clone 'ssh://-oProxyCommand=open$IFS" substring. NOTE: this was discovered before CVE-2024-32884, a similar vulnerability (involving a username field) that is more difficult to exploit.

...