EUVD-2023-48773

Malicious code in bioql PyPI...

EUVD-2023-56272

Malicious code in bioql PyPI...

EUVD-2022-33116

Malicious code in bioql PyPI...

EUVD-2024-50295

Malicious code in bioql PyPI...

EUVD-2022-33117

Malicious code in bioql PyPI...

EUVD-2022-33119

Malicious code in bioql PyPI...

EUVD-2025-23169

Malicious code in bioql PyPI...

EUVD-2022-29253

Malicious code in bioql PyPI...

EUVD-2024-28264

Malicious code in bioql PyPI...

EUVD-2023-2661

Malicious code in bioql PyPI...

EUVD-2025-3093

Malicious code in bioql PyPI...

EUVD-2024-0298

Malicious code in bioql PyPI...

GHSA-HPR9-3M2G-3J9P Django vulnerable to SQL injection in column aliases

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...

UBUNTU-CVE-2025-59681

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...

CVE-2025-59681

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...

Linux Distros Unpatched Vulnerability : CVE-2025-41249

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type wit...

Spring Framework 5.3.x < 5.3.45 / 6.1.x < 6.1.23 / 6.2.x < 6.2.11 Annotation Detection Vulnerability (CVE-2025-41249)

The version of Spring Framework installed on the remote host is 5.3.x prior to 5.3.45, 6.1.x prior to 6.1.23, or 6.2.x prior to 6.2.11. It is, therefore, affected by an annotation detection vulnerability: - The Spring Framework annotation detection mechanism may not correctly resolve annotations ...

CVE-2025-41249

The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions. Your application may be affected by...

CVE-2025-10584

CVE-2025-10584 affects Portabilis i-Educar up to version 2.10. The vulnerability is a cross-site scripting flaw in the file /intranet/educar_calendario_anotacao_cad.php, caused by improper handling of the nm_anotacao/descricao parameter. It can be exploited remotely, and an exploit is publicly av...

PT-2025-38105

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar versions up to 2.10 Description: A vulnerability exists in Portabilis i-Educar up to version 2.10. The issue is related to cross site scripting in the file /intranet/educar calendario anotacao cad.php. Manipulation of the ...