CVE-2022-38538

Archery v1.7.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the checksum parameter in the report module...

CVE-2022-38540

Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the createkillsession interface...

CVE-2022-38539

Archery v1.7.5 to v1.8.5 was discovered to contain a SQL injection vulnerability via the where parameter at /archive/apply...

CVE-2022-38542

Archery v1.4.0 to v1.8.5 was discovered to contain a SQL injection vulnerability via the ThreadIDs parameter in the killsession interface. The project has released an update, please upgrade to v1.9.0 and above...

CVE-2019-20008

In Archery before 1.3, inserting an XSS payload into a project name either by creating a new project or editing an existing one will result in stored XSS on the vulnerability-scan scheduling page...

EUVD-2010-1738

Malware in sbrugna...

EUVD-2019-0105

Malware in sbrugna...

EUVD-2022-41119

Malicious code in bioql PyPI...

EUVD-2023-34935

Malicious code in bioql PyPI...

EUVD-2022-41120

Malicious code in bioql PyPI...

EUVD-2023-34934

Malicious code in bioql PyPI...

EUVD-2023-52140

Malicious code in bioql PyPI...

EUVD-2023-34936

Malicious code in bioql PyPI...

EUVD-2023-34938

Malicious code in bioql PyPI...

EUVD-2022-41117

Malicious code in bioql PyPI...

EUVD-2022-41116

Malicious code in bioql PyPI...

EUVD-2023-34937

Malicious code in bioql PyPI...

EUVD-2022-41121

Malicious code in bioql PyPI...

EUVD-2022-41118

Malicious code in bioql PyPI...

CVE-2023-30557

Archery is an open source SQL audit platform. The Archery project contains multiple SQL injection vulnerabilities, that may allow an attacker to query the connected databases. Affected versions are subject to SQL injection in the datadictionary.py tableinfo. User input coming from the dbname in a...