EUVD-2025-26232

Malicious code in bioql PyPI...

CVE-2025-44033

SQL injection vulnerability in oasystem oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector method declaration in src/main/java/cn/gson/oasys/mappers/AddressMapper.java...

CVE-2025-44033

SQL injection vulnerability in oasystem oasys v.1.1 allows a remote attacker to execute arbitrary code via the allDirector method declaration in src/main/java/cn/gson/oasys/mappers/AddressMapper.java...

CVE-2025-44033

The oa_system oasys version 1.1 is vulnerable to an SQL injection vulnerability (CWE-89) within the allDirector() method declaration in src/main/java/cn/gson/oasys/mappers/AddressMapper.java. A remote attacker can exploit this flaw to execute arbitrary code . A CVSS 3.1 score of 9.8 (CRITICAL) re...