EUVD-2024-43481

Malicious code in bioql PyPI...

EUVD-2025-15489

Malicious code in bioql PyPI...

EUVD-2023-33379

Malicious code in bioql PyPI...

EUVD-2025-18544

Malicious code in bioql PyPI...

EUVD-2025-10572

Malicious code in bioql PyPI...

EUVD-2025-8095

Malicious code in bioql PyPI...

EUVD-2025-5404

Malicious code in bioql PyPI...

EUVD-2025-8155

Malicious code in bioql PyPI...

EUVD-2025-31708

Malicious code in bioql PyPI...

EUVD-2025-31709

Malicious code in bioql PyPI...

EUVD-2022-32590

Malicious code in bioql PyPI...

EUVD-2025-31291

Malicious code in bioql PyPI...

EUVD-2022-38920

Malicious code in bioql PyPI...

EUVD-2025-7924

Malicious code in bioql PyPI...

EUVD-2024-23199

Malicious code in bioql PyPI...

CVE-2025-61603

WeGIA (web manager for charitable institutions) versions 3.4.12 and earlier contain an SQL Injection in /controle/control.php via the descricao parameter, enabling attackers to execute arbitrary SQL commands and compromise database confidentiality, integrity, and availability. The issue is fixed ...

CVE-2025-8122

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability...

CVE-2025-8122

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability...

CVE-2025-8122

The connected Red Hat advisory details CVE-2025-7063 as a PAD CMS vulnerability where an unauthenticated attacker can exploit client-controlled permission checks to upload arbitrary files (any type/extension) through the file upload functionality, enabling Remote Code Execution. Affected are all ...

CVE-2025-8121 Blind SQL Injection in PAD CMS

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability...