EUVD-2025-23636

Malicious code in bioql PyPI...

EUVD-2023-50974

Malicious code in bioql PyPI...

EUVD-2024-53448

Malicious code in bioql PyPI...

EUVD-2024-16890

Malicious code in bioql PyPI...

EUVD-2024-33517

Malicious code in bioql PyPI...

EUVD-2022-39161

Malicious code in bioql PyPI...

EUVD-2023-43186

Malicious code in bioql PyPI...

EUVD-2022-4084

Malicious code in bioql PyPI...

EUVD-2021-7569

Malicious code in bioql PyPI...

EUVD-2023-24375

Malicious code in bioql PyPI...

EUVD-2024-51217

Malicious code in bioql PyPI...

EUVD-2024-26993

Malicious code in bioql PyPI...

EUVD-2023-57488

Malicious code in bioql PyPI...

EUVD-2024-31958

Malicious code in bioql PyPI...

EUVD-2025-22761

Malicious code in bioql PyPI...

docker-security-course

This is a vulnerable nodejs app for demos, as stated in the README.md file. The app is designed to demonstrate the use of Docker to clean up after a breach and prevent them from happening again in the future. The app is built using the Dockerfile, which creates an image with the name "node-hack"...

PT-2025-34575 · Unknown · Givanz Vvveb

Name of the Vulnerable Software and Affected Versions: givanz Vvveb versions up to 1.0.7.2 Description: A weakness exists in givanz Vvveb that allows for unrestricted file upload. The issue is located in an unknown function within the /system/traits/media.php file. Manipulation of the files...

CVE-2025-5061

The WP Import Export Lite plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'wpieparseuploaddata' function in all versions up to, and including, 3.9.29. This makes it possible for authenticated attackers, with Subscriber-level access and above...

CVE-2013-10040 ClipBucket <= 2.6 ofc_upload_image.php Arbitrary File Upload RCE

ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofcuploadimage.php script located at /adminarea/charts/ofc-library/. This endpoint allows unauthenticated users to upload arbitrary files, including executable PHP scripts. Once uploaded, the attacker can access the file...

PT-2025-31045 · Code Projects · Online Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Online Ordering System version 1.0 Description: A critical issue exists in code-projects Online Ordering System 1.0, specifically within the /admin/product.php file. The manipulation of the image argument allows for unrestricted...