EUVD-2025-33354

An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calculation logic fails to validate quantity inputs properly...

CVE-2025-56426

Summary: CVE-2025-56426 affects WebKul Bagisto v2.3.6. The issue resides in the Cart/Checkout API’s price calculation logic, where quantity inputs are not properly validated, enabling remote code execution. All sources consistently describe a vulnerability that could be exploited via the Cart/Che...

CVE-2025-56426

An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calculation logic fails to validate quantity inputs properly...

CVE-2025-56426

An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the price calculation logic fails to validate quantity inputs properly...

EUVD-2019-0761

Malware in sbrugna...

EUVD-2025-21606

Malicious code in bioql PyPI...

EUVD-2025-1989

Malicious code in bioql PyPI...

EUVD-2023-40212

Malicious code in bioql PyPI...

EUVD-2025-30370

Malicious code in bioql PyPI...

EUVD-2022-6162

Malicious code in bioql PyPI...

EUVD-2025-4660

Malicious code in bioql PyPI...

EUVD-2023-55932

Malicious code in bioql PyPI...

EUVD-2025-10896

Malicious code in bioql PyPI...

EUVD-2023-40258

Malicious code in bioql PyPI...

EUVD-2025-18485

Malicious code in bioql PyPI...

EUVD-2023-34371

Malicious code in bioql PyPI...

EUVD-2025-2030

Malicious code in bioql PyPI...

CVE-2025-10759

A vulnerability was detected in Webkul QloApps up to 1.7.0. This affects an unknown function of the component CSRF Token Handler. Performing manipulation of the argument token results in authorization bypass. The attack may be initiated remotely. The exploit is now public and may be used. The...

CVE-2025-10759

A vulnerability was detected in Webkul QloApps up to 1.7.0. This affects an unknown function of the component CSRF Token Handler. Performing manipulation of the argument token results in authorization bypass. The attack may be initiated remotely. The exploit is now public and may be used. The...

CVE-2025-10759 Webkul QloApps CSRF Token authorization

A vulnerability was detected in Webkul QloApps up to 1.7.0. This affects an unknown function of the component CSRF Token Handler. Performing manipulation of the argument token results in authorization bypass. The attack may be initiated remotely. The exploit is now public and may be used. The...