EUVD-2025-28780

Malicious code in bioql PyPI...

EUVD-2024-31867

Malicious code in bioql PyPI...

EUVD-2024-16410

Malicious code in bioql PyPI...

EUVD-2023-34222

Malicious code in bioql PyPI...

EUVD-2024-33463

Malicious code in bioql PyPI...

EUVD-2024-32514

Malicious code in bioql PyPI...

EUVD-2024-50751

Malicious code in bioql PyPI...

EUVD-2024-33184

Malicious code in bioql PyPI...

EUVD-2022-2449

Malicious code in bioql PyPI...

EUVD-2024-17595

Malicious code in bioql PyPI...

EUVD-2025-10021

Malicious code in bioql PyPI...

EUVD-2024-17049

Malicious code in bioql PyPI...

EUVD-2024-49341

Malicious code in bioql PyPI...

CVE-2025-52656

HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields...

EUVD-2025-32359

HCL MyXalytics: 6.6. is affected by Mass Assignment vulnerability. Mass Assignment occurs when user input is automatically bound to application objects without proper validation or access controls, potentially allowing unauthorized modification of sensitive fields...

HCL MyXalytics 安全漏洞

HCL MyXalytics is an analytics software product from HCL India. It is used to perform data analysis and other related tasks. A security vulnerability exists in HCL MyXalytics version 6.6, which stems from a lack of proper validation and access control when automatically binding user inputs to...

PT-2025-40574

Name of the Vulnerable Software and Affected Versions HCL MyXalytics version 6.6 Description The software is susceptible to a Mass Assignment issue. This happens when user-supplied data is automatically mapped to application objects without sufficient validation or access controls, potentially...

PT-2025-39960

Name of the Vulnerable Software and Affected Versions SmartCrawl SEO plugin for WordPress versions prior to 3.14.4 Description The SmartCrawl SEO plugin for WordPress has an issue where data can be modified without authorization. This is due to a missing capability check within the update submodu...

PT-2025-39243

Name of the Vulnerable Software and Affected Versions MultiLoca - WooCommerce Multi Locations Inventory Management plugin for WordPress versions prior to 4.2.9 Description The software is susceptible to unauthorized data modification, potentially allowing attackers to escalate privileges...

CVE-2025-8999

The Sydney theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'activatemodules' function in all versions up to, and including, 2.56. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate...