EUVD-2023-54419

Malicious code in bioql PyPI...

EUVD-2025-18868

Malicious code in bioql PyPI...

EUVD-2022-30079

Malicious code in bioql PyPI...

EUVD-2025-16206

Malicious code in bioql PyPI...

EUVD-2024-51192

Malicious code in bioql PyPI...

EUVD-2021-30365

Malicious code in bioql PyPI...

EUVD-2022-4716

Malicious code in bioql PyPI...

EUVD-2025-26074

Malicious code in bioql PyPI...

EUVD-2022-29155

Malicious code in bioql PyPI...

EUVD-2022-4832

Malicious code in bioql PyPI...

EUVD-2021-27842

Malicious code in bioql PyPI...

EUVD-2022-4481

Malicious code in bioql PyPI...

CVE-2021-42193

nopCommerce 4.40.3 is vulnerable to XSS in the Product Name at /Admin/Product/Edit/id. Each time a user views the product in the shop, the XSS payload fires...

itsourcecode Open Source Job Portal 代码问题漏洞

itsourcecode Open Source Job Portal is an enterprise portal site of itsourcecode open source. A code issue vulnerability exists in version 1.0 of itsourcecode Open Source Job Portal, which stems from an incorrect manipulation of the parameter photo in the file /admin/user/controller.php, which...

PT-2025-39683

Name of the Vulnerable Software and Affected Versions itsourcecode Open Source Job Portal version 1.0 Description A flaw exists in itsourcecode Open Source Job Portal that allows for remote SQL injection. The issue is located in the file /admin/user/index.php?view=edit. Manipulation of the ID...

GHSA-4C44-R8RM-3P39 Mangati NovoSGA XSS vulnerability in /admin

A security flaw has been discovered in Mangati NovoSGA up to 2.2.9. The impacted element is an unknown function of the file /admin of the component SVG File Handler. Performing manipulation of the argument logoNavbar/logoLogin results in cross site scripting. Remote exploitation of the attack is...

CVE-2025-10909

A security flaw has been discovered in Mangati NovoSGA up to 2.2.9. The impacted element is an unknown function of the file /admin of the component SVG File Handler. Performing manipulation of the argument logoNavbar/logoLogin results in cross site scripting. Remote exploitation of the attack is...

CVE-2025-10810

A vulnerability was detected in Campcodes Online Learning Management System 1.0. The impacted element is an unknown function of the file /admin/edituser.php. Performing manipulation of the argument firstname results in sql injection. The attack is possible to be carried out remotely. The exploit ...

CVE-2025-10807

A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/edit-customer-detailed.php. The manipulation of the argument editid results in sql injection. The attack may be launched remotely. The exploit...

CVE-2025-59056

FreePBX is an open-source web-based graphical user interface. In FreePBX 15, 16, and 17, malicious connections to the Administrator Control Panel web interface can cause the uninstall function to be triggered for certain modules. This function drops the module's database tables, which is where mo...