EUVD-2025-27137

Malicious code in bioql PyPI...

EUVD-2024-51875

Malicious code in bioql PyPI...

EUVD-2025-10923

Malicious code in bioql PyPI...

EUVD-2022-1707

Malicious code in bioql PyPI...

EUVD-2024-0674

Malicious code in bioql PyPI...

EUVD-2025-30917

Malicious code in bioql PyPI...

EUVD-2023-58938

Malicious code in bioql PyPI...

EUVD-2024-36553

Malicious code in bioql PyPI...

EUVD-2023-59175

Malicious code in bioql PyPI...

CVE-2025-0616

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Teknolojik Center Telecommunication Industry Trade Co. Ltd. B2B - Netsis Panel allows SQL Injection. This issue affects B2B - Netsis Panel: through 20251003. NOTE: The vendor was contacted early...

CVE-2025-0616

CVE-2025-0616 describes an SQL injection in Teknolojik Center Telecommunication Industry Trade Co. Ltd. B2B – Netsis Panel. The vulnerability stems from improper neutralization of special elements in SQL commands within the Netsis Panel frontend/backend, allowing potentially unauthorized access t...

CVE-2025-0642

Use of Hard-coded Credentials, Authorization Bypass Through User-Controlled Key vulnerability in PosCube Hardware Software and Consulting Ltd. Co. Assist allows Excavation, Authentication Bypass. This issue affects Assist: through 10.02.2025...

CVE-2025-0642

Use of Hard-coded Credentials, Authorization Bypass Through User-Controlled Key vulnerability in PosCube Hardware Software and Consulting Ltd. Co. Assist allows Excavation, Authentication Bypass. This issue affects Assist: through 10.02.2025...

CVE-2025-0642 Hard-coded Credentials in PosCube's Assist

Use of Hard-coded Credentials, Authorization Bypass Through User-Controlled Key vulnerability in PosCube Hardware Software and Consulting Ltd. Co. Assist allows Excavation, Authentication Bypass. This issue affects Assist: through 10.02.2025...

MAL-2025-47872 Malicious code in cors-init (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7a30aab649400d5a04c1629bbf795c86ef6d8f2580f85c4af732391eef4bfd3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-40342

Name of the Vulnerable Software and Affected Versions PosCube Assist versions through 10.02.2025 Description The software contains hard-coded credentials and allows authorization bypass through user-controlled keys, potentially enabling excavation and authentication bypass. Recommendations Update...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the comliferayportalsecurityauditwebportletAuditPortletauditEventId parameter. An attacker can access audit events belonging to a different virtual instance by specifying the identifi...

Authorization Bypass Through User-Controlled Key

Overview Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the comliferayportalsecurityauditwebportletAuditPortletauditEventId parameter. An attacker can access audit events belonging to a different virtual instance by specifying the identifi...

CVE-2025-7063

Due to client-controlled permission check parameter, PAD CMS's file upload functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution. This issue affects all 3 templates: www, b...

CVE-2025-8120 Remote Code Execution via Unrestricted File Upload in PAD CMS

Due to client-controlled permission check parameter, PAD CMS's upload photo functionality allows an unauthenticated remote attacker to upload files of any type and extension without restriction, which can then be executed leading to Remote Code Execution.This issue affects all 3 templates: www, b...