EUVD-2022-37852

Malicious code in bioql PyPI...

EUVD-2024-34544

Malicious code in bioql PyPI...

EUVD-2025-3371

Malicious code in bioql PyPI...

EUVD-2022-43763

Malicious code in bioql PyPI...

EUVD-2022-52641

Malicious code in bioql PyPI...

EUVD-2024-34539

Malicious code in bioql PyPI...

EUVD-2024-34548

Malicious code in bioql PyPI...

EUVD-2022-40852

Malicious code in bioql PyPI...

EUVD-2024-34561

Malicious code in bioql PyPI...

CVE-2025-60170 WordPress HTACCESS IP Blocker Plugin <= 1.0 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Taraprasad Swain HTACCESS IP Blocker htaccess-ip-blocker allows Stored XSS.This issue affects HTACCESS IP Blocker: from n/a through = 1.0...

CVE-2025-59828

Claude Code is an agentic coding tool. Prior to Claude Code version 1.0.39, when using Claude Code with Yarn versions 2.0+, Yarn plugins are auto-executed when running yarn --version. This could lead to a bypass of the directory trust dialog in Claude Code, as plugins would be executed prior to t...

e-learning 安全特征问题漏洞

e-learning is an exam system for youth-is-as-pale-as-poetry individual developers. A security feature issue vulnerability exists in e-learning version 1.0, which stems from insufficient generation of random values by the encryptSecret function in the JwtUtils.java file in the JWT Token Handler...

CVE-2025-8446 Blaze Demo Importer <= 1.0.12 - Missing Authorization to Authenticated (Subscriber+) Limited Plugin Install

The Blaze Demo Importer plugin for WordPress is vulnerable to unauthorized limited plugin install due to a missing capability check on the 'blazedemoimporterinstallplugin' function in all versions up to, and including, 1.0.12. This makes it possible for authenticated attackers, with...

CVE-2025-10426 itsourcecode Online Laundry Management System login.php sql injection

A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been releas...

PT-2025-36530

Name of the Vulnerable Software and Affected Versions: itsourcecode Student Information Management System version 1.0 Description: A weakness exists in itsourcecode Student Information Management System 1.0. The issue involves SQL injection caused by manipulation of the ID argument within an...

Projectworlds Travel management System SQL注入漏洞

Projectworlds Travel management System is a travel management system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Travel management System version 1.0, which originates from an incorrect manipulation of parameter t1 in file /viewcategory.php resulting in a SQL...

PT-2025-33115 · Unknown · 1000 Projects Sales Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Sales Management System version 1.0 Description: A vulnerability exists in an unknown functionality of the file /superstore/custcmp.php. Manipulation of the Username argument leads to a SQL injection. The attack can be launched...

PT-2025-33112 · Unknown · 1000 Projects Sales Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Sales Management System version 1.0 Description: A vulnerability exists in 1000 Projects Sales Management System 1.0, affecting unknown code within the /superstore/admin/sales.php file. Manipulation of the ssalescat parameter...

PT-2025-33418 · Sourcecodester · Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester COVID 19 Testing Management System version 1.0 Description: A vulnerability exists in SourceCodester COVID 19 Testing Management System 1.0, affecting an unknown functionality within the /search-report-result.php file...

Code-Projects Simple Art Gallery 注入漏洞

Code-Projects Simple Art Gallery is a Code-Projects open source simple art gallery software. An injection vulnerability exists in Code-Projects Simple Art Gallery version 1.0, which originates from a SQL injection due to a misuse of the parameter fname in the file /Admin/registration.php, which...