EUVD-2025-16905

Malicious code in bioql PyPI...

EUVD-2024-27219

Malicious code in bioql PyPI...

EUVD-2023-31050

Malicious code in bioql PyPI...

EUVD-2024-17434

Malicious code in bioql PyPI...

EUVD-2024-26211

Malicious code in bioql PyPI...

EUVD-2024-17345

Malicious code in bioql PyPI...

EUVD-2021-32220

Malicious code in bioql PyPI...

EUVD-2025-3602

Malicious code in bioql PyPI...

EUVD-2025-19010

Malicious code in bioql PyPI...

EUVD-2024-50269

Malicious code in bioql PyPI...

EUVD-2024-46445

Malicious code in bioql PyPI...

EUVD-2021-29035

Malicious code in bioql PyPI...

PT-2025-40010

Name of the Vulnerable Software and Affected Versions Karthikg1908 Hospital Management System HMS version 1.0 Description An SQL injection issue exists in the user-login.php and index.php files. The application does not properly sanitize input before using it in SQL queries. This allows remote...

GHSA-4P5R-3JMM-652Q Liferay DXP Missing Critical Step in Authentication

Liferay DXP 2023.Q4.0, 2023.Q3.1 through 2023.Q3.4, 7.4 GA through update 92 and 7.3 GA through update 35 allows a time-based one-time password TOTP to be used multiple times during the validity period, which allows attackers with access to a user’s TOTP to authenticate as the user...

Autostart Desktop Item Persistence

This module will create an autostart .desktop entry to execute a payload. The payload will be executed when the users logs in. Verified on Ubuntu 22.04 desktop with Gnome, and 18.04.3. The following payloads were used in testing: - cmd/unix/reversenetcat - linux/x64/meterpreter/reversetcp -...

Linux Distros Unpatched Vulnerability : CVE-2025-53030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. The supported version that is affected is 7.1.10. Easily exploitable...

Linux Distros Unpatched Vulnerability : CVE-2025-46801

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability. if the vulnerability is exploited, an...

CVE-2025-9254 Uniong｜WebITR - Missing Authentication

WebITR developed by Uniong has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to log into the system as arbitrary users by exploiting a specific functionality...

PT-2025-34341 · Uniong · Webitr

Name of the Vulnerable Software and Affected Versions: WebITR versions affected versions not specified Description: WebITR developed by Uniong suffers from a missing authentication issue. This allows unauthenticated remote attackers to log into the system as arbitrary users by exploiting a specif...

CVE-2025-9154

A flaw has been found in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /user/page-login.php. This manipulation of the argument email causes sql injection. The attack may be initiated remotely. The exploit has been published and m...