PT-2026-20585

Name of the Vulnerable Software and Affected Versions Library Management System versions prior to 3.2.2 Description The Library Management System plugin for WordPress is susceptible to SQL Injection due to inadequate input validation and query preparation. Specifically, the bid parameter is not...

EUVD-2025-139175

Malicious code in nuyar-adar-bid npm...

EUVD-2008-4158

Malware in sbrugna...

EUVD-2015-5041

Malware in sbrugna...

EUVD-2014-1233

Malware in sbrugna...

EUVD-2008-6013

Malware in sbrugna...

EUVD-2010-4887

Malware in sbrugna...

EUVD-2009-2265

Malware in sbrugna...

EUVD-2015-7197

Malware in sbrugna...

EUVD-2015-4745

Malware in sbrugna...

EUVD-2011-0536

Malware in sbrugna...

EUVD-2009-0967

Malware in sbrugna...

EUVD-2009-3318

Malware in sbrugna...

EUVD-2023-58332

Malicious code in bioql PyPI...

Bykea: Lack of minimum value bid wheel verification on customer_bid in Rental Trips

A missing validation on the customerbid field when creating rental trips allowed passengers to submit arbitrary bid amounts, including very low fares. Proper validation was added to prevent unrealistic values...

Jim Sanborn Is Auctioning Off the Solution to Part Four of the Kryptos Sculpture

Well, this is interesting: The auction, which will include other items related to cryptology, will be held Nov. 20. RR Auction, the company arranging the sale, estimates a winning bid between $300,000 and $500,000. Along with the original handwritten plain text of K4 and other papers related to t...

MAL-2025-9824 Malicious code in @zalastax/nolb-_bid (npm)

The package @zalastax/nolb-bid was found to contain malicious code...

Shill Bidding Prevention in Decentralized Auctions Using Smart Contracts

In online auctions, fraudulent behaviors such as shill bidding pose significant risks. This paper presents a conceptual framework that applies dynamic, behavior-based penalties to deter auction fraud using blockchain smart contracts. Unlike traditional post-auction detection methods, this approac...

CVE-2024-25891

ChurchCRM 5.5.0 FRBidSheets.php is vulnerable to Blind SQL Injection Time-based via the CurrentFundraiser GET parameter...

CVE-2024-10155

A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been classified as problematic. This affects an unknown part of the file book-boat.php?bid=1 of the component Book a Boat Page. The manipulation of the argument phonenumber leads to cross site scripting. It is possible to...