EUVD-2022-5394

Malicious code in bioql PyPI...

EUVD-2022-33139

Malicious code in bioql PyPI...

EUVD-2025-27506

Malicious code in bioql PyPI...

EUVD-2022-26405

Malicious code in bioql PyPI...

EUVD-2023-35305

Malicious code in bioql PyPI...

EUVD-2022-39105

Malicious code in bioql PyPI...

EUVD-2023-42947

Malicious code in bioql PyPI...

EUVD-2024-47979

Malicious code in bioql PyPI...

EUVD-2023-35587

Malicious code in bioql PyPI...

EUVD-2023-55145

Malicious code in bioql PyPI...

EUVD-2023-43103

Malicious code in bioql PyPI...

EUVD-2023-42942

Malicious code in bioql PyPI...

EUVD-2024-28392

Malicious code in bioql PyPI...

EUVD-2024-1920

Malicious code in bioql PyPI...

EUVD-2023-32358

Malicious code in bioql PyPI...

EUVD-2023-31075

Malicious code in bioql PyPI...

EUVD-2022-43589

Malicious code in bioql PyPI...

PT-2025-40323

Name of the Vulnerable Software and Affected Versions Ajax WooSearch WordPress plugin versions through 1.0.0 Description The Ajax WooSearch WordPress plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action. This allows for SQL injection by...

CVE-2025-7052 LatePoint <= 5.1.94 - Cross-Site Request Forgery to Account Takeover via change_password() Function

The LatePoint plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.1.94. This is due to missing nonce validation on the changepassword function of its customercabinetchangepassword AJAX route. The plugin hooks this endpoint via wpajax and...

CVE-2025-36274

IBM Aspera HTTP Gateway 2.0.0 through 2.3.1 stores sensitive information in clear text in easily obtainable files which can be read by an unauthenticated user...