EUVD-2025-16581

Malicious code in bioql PyPI...

EUVD-2024-50256

Malicious code in bioql PyPI...

EUVD-2024-48990

Malicious code in bioql PyPI...

EUVD-2024-46902

Malicious code in bioql PyPI...

EUVD-2025-8716

Malicious code in bioql PyPI...

EUVD-2025-5552

Malicious code in bioql PyPI...

EUVD-2025-13333

Malicious code in bioql PyPI...

EUVD-2024-2483

Malicious code in bioql PyPI...

EUVD-2025-1617

Malicious code in bioql PyPI...

EUVD-2025-19550

Malicious code in bioql PyPI...

EUVD-2025-22759

Malicious code in bioql PyPI...

EUVD-2024-16890

Malicious code in bioql PyPI...

EUVD-2023-59362

Malicious code in bioql PyPI...

EUVD-2025-13399

Malicious code in bioql PyPI...

EUVD-2022-34682

Malicious code in bioql PyPI...

CVE-2025-8344 openviglet shio ShStaticFileAPI.java shStaticFileUpload unrestricted upload

A vulnerability classified as critical has been found in openviglet shio up to 0.3.8. Affected is the function shStaticFileUpload of the file shio-app/src/main/java/com/viglet/shio/api/staticfile/ShStaticFileAPI.java. The manipulation of the argument filename leads to unrestricted upload. It is...

CVE-2025-8256

CVE-2025-8256 affects code-projects Online Ordering System 1.0, where the argument image in /admin/product.php can be manipulated to achieve unrestricted file uploads. The trusted sources consistently describe a remote-exploitable pathway with publicly disclosed exploit details. The likely impact...

CVE-2025-7895 harry0703 MoneyPrinterTurbo File Extension video.py upload_bgm_file unrestricted upload

A vulnerability, which was classified as critical, was found in harry0703 MoneyPrinterTurbo up to 1.2.6. Affected is the function uploadbgmfile of the file app/controllers/v1/video.py of the component File Extension Handler. The manipulation of the argument File leads to unrestricted upload. It i...

CVE-2025-7470

CVE-2025-7470 affects Campcodes Sales and Inventory System 1.0. The vulnerability is in the /pages/product_add.php file where manipulating the image parameter enables unrestricted file upload from remote attackers. Public disclosure of the exploit is noted across multiple sources. Root cause: ins...

CVE-2025-7124

A vulnerability classified as critical has been found in code-projects Online Note Sharing 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Image Handler. The manipulation of the argument image leads to unrestricted upload. It is possible to...