EUVD-2025-10596

Malicious code in bioql PyPI...

EUVD-2025-31708

Malicious code in bioql PyPI...

EUVD-2025-31709

Malicious code in bioql PyPI...

EUVD-2025-17500

Malicious code in bioql PyPI...

EUVD-2023-33379

Malicious code in bioql PyPI...

EUVD-2025-2818

Malicious code in bioql PyPI...

EUVD-2025-2820

Malicious code in bioql PyPI...

EUVD-2022-7430

Malicious code in bioql PyPI...

EUVD-2024-54710

Malicious code in bioql PyPI...

EUVD-2022-5228

Malicious code in bioql PyPI...

EUVD-2023-44085

Malicious code in bioql PyPI...

EUVD-2022-5181

Malicious code in bioql PyPI...

CVE-2025-61603

WeGIA (web manager for charitable institutions) versions 3.4.12 and earlier contain an SQL Injection in /controle/control.php via the descricao parameter, enabling attackers to execute arbitrary SQL commands and compromise database confidentiality, integrity, and availability. The issue is fixed ...

CVE-2025-8122

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability...

CVE-2025-8122

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability...

CVE-2025-8122

The connected Red Hat advisory details CVE-2025-7063 as a PAD CMS vulnerability where an unauthenticated attacker can exploit client-controlled permission checks to upload arbitrary files (any type/extension) through the file upload functionality, enabling Remote Code Execution. Affected are all ...

CVE-2025-8121 Blind SQL Injection in PAD CMS

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability...

PT-2025-39970

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The issue involves improper neutralization of input provided by an authorized user within the article positioning functionality, leading to potential Blind SQL...

PT-2025-39971

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description The issue involves improper neutralization of input provided by an authorized user in the article positioning functionality, leading to Blind SQL Injection...

CVE-2025-8122: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability...