EUVD-2022-34007

Malicious code in bioql PyPI...

EUVD-2022-1975

Malicious code in bioql PyPI...

EUVD-2022-38920

Malicious code in bioql PyPI...

EUVD-2024-36171

Malicious code in bioql PyPI...

EUVD-2022-25245

Malicious code in bioql PyPI...

EUVD-2025-10557

Malicious code in bioql PyPI...

EUVD-2022-6443

Malicious code in bioql PyPI...

EUVD-2025-8810

Malicious code in bioql PyPI...

EUVD-2025-19940

Malicious code in bioql PyPI...

EUVD-2025-8155

Malicious code in bioql PyPI...

EUVD-2023-33379

Malicious code in bioql PyPI...

EUVD-2025-27276

Malicious code in bioql PyPI...

EUVD-2025-24716

Malicious code in bioql PyPI...

EUVD-2025-15489

Malicious code in bioql PyPI...

EUVD-2025-7924

Malicious code in bioql PyPI...

EUVD-2025-32308

TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, is vulnerable to a blind, unauthenticated Server-Side Request Forgery SSRF vulnerability via the UPnP MediaRenderer service AVTransport:1. The device accepts unauthenticated SetAVTransportURI SOAP...

CVE-2025-61605 WeGIA: SQL Injection (Blind Time-Based) Vulnerability in /pet/profile_pet.php Endpoint

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an SQL Injection vulnerability which was identified in the /pet/profilepet.php endpoint, specifically in the idpet parameter. This vulnerability allows attackers to execute arbitrary SQL...

CVE-2025-61605 WeGIA: SQL Injection (Blind Time-Based) Vulnerability in /pet/profile_pet.php Endpoint

WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an SQL Injection vulnerability which was identified in the /pet/profilepet.php endpoint, specifically in the idpet parameter. This vulnerability allows attackers to execute arbitrary SQL...

CVE-2025-61605

WeGIA contains an SQL Injection in version 3.4.12 and earlier, exploitable via the id_pet parameter in /pet/profile_pet.php. The root cause is improper handling of that parameter, allowing arbitrary SQL commands and compromising database confidentiality, integrity, and availability. A fix is avai...

CVE-2025-61603

WeGIA (web manager for charitable institutions) versions 3.4.12 and earlier contain an SQL Injection in /controle/control.php via the descricao parameter, enabling attackers to execute arbitrary SQL commands and compromise database confidentiality, integrity, and availability. The issue is fixed ...