EUVD-2025-21029

Malicious code in bioql PyPI...

CVE-2025-34102

A remote code execution vulnerability exists in CryptoLog PHP version, discontinued since 2009 due to a chained exploitation of SQL injection and command injection vulnerabilities. An unauthenticated attacker can gain shell access as the web server user by first exploiting a SQL injection flaw in...

CVE-2025-34102

CVE-2025-34102 affects CryptoLog (PHP version); it enables unauthenticated remote code execution via a chained SQL injection (login.php) to bypass authentication, followed by a command injection (logshares_ajax.php) using the lsid parameter to execute commands as the web user. The exploit path re...