EUVD-2023-39104

Malicious code in bioql PyPI...

EUVD-2025-11340

Malicious code in bioql PyPI...

EUVD-2025-23134

Malicious code in bioql PyPI...

CVE-2025-8319

the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter...

CVE-2025-8319

the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter...

CVE-2025-8319

the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter...

CVE-2025-8319: Improper Neutralization of Input During Web Page Generation

the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter...

CVE-2025-8319

the BMA login interface allows arbitrary JavaScript or HTML to be written straight into the page’s Document Object Model via the error= URL parameter...

CVE-2025-8319

The Barracuda Message Archiver (BMA) email archiving platform is vulnerable to a DOM-based Cross-Site Scripting (XSS) attack. The vulnerability exists in the BMA login interface , where the application fails to properly sanitize the error= URL parameter. This allows an attacker to inject arbitrar...

PT-2025-31341 · Bma · Bma

Name of the Vulnerable Software and Affected Versions: BMA affected versions not specified Description: The BMA login interface allows arbitrary JavaScript or HTML to be written directly into the page’s Document Object Model DOM via the error= URL parameter. This can lead to potential cross-site...

CVE-2025-39518

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RedefiningTheWeb BMA Lite bma-lite-appointment-booking-and-scheduling allows SQL Injection.This issue affects BMA Lite: from n/a through = 1.4.2...

CVE-2025-39518

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RedefiningTheWeb BMA Lite bma-lite-appointment-booking-and-scheduling allows SQL Injection.This issue affects BMA Lite: from n/a through = 1.4.2...

CVE-2025-39518 WordPress BMA Lite <= 1.4.2 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RedefiningTheWeb BMA Lite allows SQL Injection. This issue affects BMA Lite: from n/a through 1.4.2...

CVE-2025-39518

CVE-2025-39518 describes an SQL Injection in the WordPress plugin BMA Lite – Appointment Booking and Scheduling . The vulnerability affects versions

CVE-2025-39518 WordPress BMA Lite plugin <= 1.4.2 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RedefiningTheWeb BMA Lite bma-lite-appointment-booking-and-scheduling allows SQL Injection.This issue affects BMA Lite: from n/a through = 1.4.2...

PT-2025-16632

Name of the Vulnerable Software and Affected Versions RedefiningTheWeb BMA Lite versions 1.4.2 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks...

WordPress plugin BMA Lite SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection...

CVE-2025-39518: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in RedefiningTheWeb BMA Lite bma-lite-appointment-booking-and-scheduling allows SQL Injection.This issue affects BMA Lite: from n/a through = 1.4.2...

aldryn-django (>=5.1.4.0, <=5.1.5.0), app-parcheggi-backup (>=1.0.0, <=1.0.1) +48 more potentially affected by CVE-2025-26699 via django (>=5.1.0, <=5.1.6)

django PYPI version =5.1.0, =5.1.4.0, =1.0.0, =0.2.0a1, =0.1.6, =0.0.3, =0.1.7, =0.0.15, =2.7.0, =0.92.0, =1.0.3, =0.6.2, =0.7.0 and more Source cves: CVE-2025-26699 Source advisory: GHSA-P3FP-8748-VQFQ...

aldryn-django (5.1.4.0), app-parcheggi-backup (>=1.0.0, <=1.0.1) +38 more potentially affected by CVE-2024-56374 via django (>=5.1.0, <=5.1.4)

django PYPI version =5.1.0, =1.0.0, =0.2.0a1, =0.1.6, =0.0.3, =0.0.15, =2.7.0, =0.92.0, =1.0.3, =0.6.2, =0.7.0 - django-pesapal 2.0.0 - django-qr-toolkit-core 4.2.3 and more Source cves: CVE-2024-56374 Source advisory: GHSA-QCGG-J2X8-H9G8...