EUVD-2023-50215

Malicious code in bioql PyPI...

EUVD-2025-14256

Malicious code in bioql PyPI...

CVE-2025-4543

A vulnerability, which was classified as critical, was found in LyLme Spage 2.1. This affects an unknown part of the file lylmespage/blob/master/admin/ajaxlink.php. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-4543

A vulnerability, which was classified as critical, was found in LyLme Spage 2.1. This affects an unknown part of the file lylmespage/blob/master/admin/ajaxlink.php. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2025-4543 LyLme Spage ajax_link.php sql injection

A vulnerability, which was classified as critical, was found in LyLme Spage 2.1. This affects an unknown part of the file lylmespage/blob/master/admin/ajaxlink.php. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CVE-2023-45952

An arbitrary file upload vulnerability in the component ajaxlink.php of lylmespage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2023-45952

An arbitrary file upload vulnerability in the component ajaxlink.php of lylmespage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2023-45952

CVE-2023-45952 affects LyLme Spage v1.7.0 via the ajax_link.php (also referred to as ajax link.php) component. The vulnerability is an arbitrary file upload that can lead to remote code execution. Reported impact includes high confidentiality, integrity, and availability. Public records do not sh...

CVE-2023-45952

An arbitrary file upload vulnerability in the component ajaxlink.php of lylmespage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted file...

CVE-2023-45952

An arbitrary file upload vulnerability in the component ajaxlink.php of lylmespage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted file...