EUVD-2025-28240

Malicious code in bioql PyPI...

EUVD-2025-28902

Malicious code in bioql PyPI...

EUVD-2022-53274

Malicious code in bioql PyPI...

EUVD-2022-6613

Malicious code in bioql PyPI...

EUVD-2022-32868

Malicious code in bioql PyPI...

EUVD-2022-52628

Malicious code in bioql PyPI...

EUVD-2022-52643

Malicious code in bioql PyPI...

EUVD-2025-31366

Malicious code in bioql PyPI...

EUVD-2022-32965

Malicious code in bioql PyPI...

EUVD-2025-31638

Malicious code in bioql PyPI...

EUVD-2025-32039

Malicious code in bioql PyPI...

CVE-2025-59814

This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing Admin endpoint, enabling them to read the entire contents of the Billing Admin database...

CVE-2025-59814 Unauthenticated SQL-injection in password field

This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing Admin endpoint, enabling them to read the entire contents of the Billing Admin database...

CVE-2025-59814: Improper Neutralization of Special Elements used in an SQL Command

This vulnerability allows malicious actors to gain unauthorized access to the Zenitel ICX500 and ICX510 Gateway Billing Admin endpoint, enabling them to read the entire contents of the Billing Admin database...

CVE-2025-59827 FlagForgeCTF is Missing Authorization in main-v2

Flag Forge is a Capture The Flag CTF platform. In version 2.1.0, the /api/admin/assign-badge endpoint lacks proper access control, allowing any authenticated user to assign high-privilege badges e.g., Staff to themselves. This could lead to privilege escalation and impersonation of administrative...

CVE-2025-10909 Mangati NovoSGA SVG File admin cross site scripting

A security flaw has been discovered in Mangati NovoSGA up to 2.2.9. The impacted element is an unknown function of the file /admin of the component SVG File Handler. Performing manipulation of the argument logoNavbar/logoLogin results in cross site scripting. Remote exploitation of the attack is...

Exploit for Authentication Bypass Using an Alternate Path or Channel in Connectwise Screenconnect

ScreenConnect CVE-2024-1709 Exploit Tool A Python tool to che...

CVE-2025-40689

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'remark', 'status' and 'requestid' parameters in the endpoint '/ofrs/admin/request-details.php'...

CVE-2025-40695

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'remark', 'status' and 'takeaction' parameters via POST at the endpoint '/ofrs/admin/request-details.php'. This...

CVE-2025-40689

CVE-2025-40689 affects Online Fire Reporting System v1.2 (PHPGurukul). The vulnerability is a SQL Injection in the /ofrs/admin/request-details.php endpoint, exploitable via the remark, status, and requestid parameters, enabling an attacker to retrieve, create, update, and delete records in the ba...