EUVD-2023-12683

Malicious code in bioql PyPI...

EUVD-2025-15328

Malicious code in bioql PyPI...

EUVD-2022-28186

Malicious code in bioql PyPI...

EUVD-2022-51827

Malicious code in bioql PyPI...

EUVD-2023-12678

Malicious code in bioql PyPI...

EUVD-2022-38730

Malicious code in bioql PyPI...

EUVD-2022-51719

Malicious code in bioql PyPI...

EUVD-2025-5309

Malicious code in bioql PyPI...

EUVD-2024-16635

Malicious code in bioql PyPI...

EUVD-2023-42041

Malicious code in bioql PyPI...

EUVD-2024-28125

Malicious code in bioql PyPI...

EUVD-2025-15134

Malicious code in bioql PyPI...

EUVD-2025-15310

Malicious code in bioql PyPI...

EUVD-2024-27813

Malicious code in bioql PyPI...

itsourcecode Open Source Job Portal SQL注入漏洞

itsourcecode Open Source Job Portal is an enterprise portal site of itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Open Source Job Portal, which stems from incorrect manipulation of the parameter ID in the file /admin/vacancy/index.php, which could...

CVE-2025-11055 SourceCodester Online Hotel Reservation System updateaddress.php sql injection

A vulnerability was detected in SourceCodester Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/updateaddress.php. The manipulation of the argument address results in sql injection. The attack may be launched remotely. The exploit is now public and may be us...

CVE-2025-10940 Total.js CMS Layout admin layouts_save cross site scripting

A vulnerability was found in Total.js CMS 1.0.0. Affected by this vulnerability is the function layoutssave of the file /admin/ of the component Layout Page. Performing manipulation of the argument HTML results in cross site scripting. It is possible to initiate the attack remotely. The exploit h...

GHSA-QX3F-6VQ3-8J8M Mattermost Path Traversal vulnerability

Mattermost versions 10.8.x = 10.8.3, 10.5.x = 10.5.8, 9.11.x = 9.11.17, 10.10.x = 10.10.1, 10.9.x = 10.9.3 fail to validate import directory path configuration which allows admin users to execute arbitrary code via malicious plugin upload to prepackaged plugins directory...

PT-2025-38603

Name of the Vulnerable Software and Affected Versions General Bytes Crypto Application Server CAS versions 20201208 through 20220531.38 General Bytes Crypto Application Server CAS version 20220725.22 Description General Bytes Crypto Application Server CAS contains an authentication bypass in the...

CVE-2025-10601 SourceCodester Online Exam Form Submission index.php sql injection

A vulnerability has been found in SourceCodester Online Exam Form Submission 1.0. Affected is an unknown function of the file /admin/index.php. Such manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publi...