EUVD-2024-43481

Malicious code in bioql PyPI...

EUVD-2023-52431

Malicious code in bioql PyPI...

EUVD-2025-27276

Malicious code in bioql PyPI...

EUVD-2024-36171

Malicious code in bioql PyPI...

EUVD-2024-34731

Malicious code in bioql PyPI...

EUVD-2024-45458

Malicious code in bioql PyPI...

EUVD-2024-45457

Malicious code in bioql PyPI...

EUVD-2023-12782

Malicious code in bioql PyPI...

EUVD-2024-39120

Malicious code in bioql PyPI...

EUVD-2025-28195

Malicious code in bioql PyPI...

EUVD-2024-43483

Malicious code in bioql PyPI...

EUVD-2025-27812

Malicious code in bioql PyPI...

EUVD-2024-45555

Malicious code in bioql PyPI...

EUVD-2024-45556

Malicious code in bioql PyPI...

EUVD-2025-32308

TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, is vulnerable to a blind, unauthenticated Server-Side Request Forgery SSRF vulnerability via the UPnP MediaRenderer service AVTransport:1. The device accepts unauthenticated SetAVTransportURI SOAP...

CVE-2025-61605 WeGIA: SQL Injection (Blind Time-Based) Vulnerability in /pet/profile_pet.php Endpoint

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an SQL Injection vulnerability which was identified in the /pet/profilepet.php endpoint, specifically in the idpet parameter. This vulnerability allows attackers to execute arbitrary SQL...

CVE-2025-61605 WeGIA: SQL Injection (Blind Time-Based) Vulnerability in /pet/profile_pet.php Endpoint

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an SQL Injection vulnerability which was identified in the /pet/profilepet.php endpoint, specifically in the idpet parameter. This vulnerability allows attackers to execute arbitrary SQL...

CVE-2025-61605

WeGIA contains an SQL Injection in version 3.4.12 and earlier, exploitable via the id_pet parameter in /pet/profile_pet.php. The root cause is improper handling of that parameter, allowing arbitrary SQL commands and compromising database confidentiality, integrity, and availability. A fix is avai...

CVE-2025-61603

WeGIA (web manager for charitable institutions) versions 3.4.12 and earlier contain an SQL Injection in /controle/control.php via the descricao parameter, enabling attackers to execute arbitrary SQL commands and compromise database confidentiality, integrity, and availability. The issue is fixed ...

AI Security 101: Mapping the AI Attack Surface

A practical guide to the risks, blind spots, and protections every security team needs to know...