EUVD-2024-41388

Malicious code in bioql PyPI...

EUVD-2025-12284

Malicious code in bioql PyPI...

EUVD-2024-42350

Malicious code in bioql PyPI...

EUVD-2024-39147

Malicious code in bioql PyPI...

EUVD-2024-36055

Malicious code in bioql PyPI...

EUVD-2025-4160

Malicious code in bioql PyPI...

JUX Real Estate 3.4.0 - SQL Injection

Exploit Title: JUX Real Estate 3.4.0 - SQL Injection Exploit Author: CraCkEr Date: 26/02/2025 Vendor: JoomlaUX Vendor Homepage: https://joomlaux.com/ Software Link: https://extensions.joomla.org/extension/jux-real-estate/ Demo Link: http://demo.joomlaux.com/jux-real-estate Tested on: Windows 11 P...

JUX Real Estate 3.4.0 SQL Injection

JUX Real Estate version 3.4.0 suffers from a remote SQL injection vulnerability. Exploit Title: JUX Real Estate 3.4.0 - SQL Injection Exploit Author: CraCkEr Date: 26/02/2025 Vendor: JoomlaUX Vendor Homepage: https://joomlaux.com/ Software Link:...

CVE-2024-47926 Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...

CVE-2024-47926 Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Tecnick TCExam – CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...

CVE-2024-47926

Tecnick TCExam is affected by a SQL Injection (CWE-89) due to improper neutralization of special elements in SQL commands. The CVE-2024-47926 entry indicates a high-impact vulnerability with CVSS v3.1 base score 9.8 (Network attack vector, low complexity, no privileges required, user interaction ...

CVE-2024-48070

CVE-2024-48070 affects Weaver E-cology. Multiple sources describe a vulnerability where attackers can craft requests to insert remote code and potentially execute code with server privileges, linked to a SQL injection issue in Weaver E‑cology v9.x. Affected component: SQL handling in Weaver E‑col...

Security Bulletin: IBM Sterling B2B Integrator is vulnerable to SQL injection

Summary IBM Sterling B2B Integrator is vulnerable to SQL injection Vulnerability Details CVEID:CVE-2023-50316 DESCRIPTION: IBM Sterling B2B Integrator Standard Edition is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to...

CVE-2024-51882

CVE-2024-51882 affects the WordPress plugin Gboy Custom Google Map (affected versions

CVE-2024-45249

Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...

CVE-2024-45249

Summary: CVE-2024-45249 is a SQL injection (CWE-89) affecting Cavok. The vulnerability arises from improper neutralization of special elements in SQL commands. The public records consistently describe Cavok’s SQL injection issue but do not provide concrete exploit details or affected version rang...

CVE-2024-45249 Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...

CVE-2024-45249 Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Cavok – CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...

PT-2024-31506 · Cavok · Cavok

Name of the Vulnerable Software and Affected Versions: Cavok affected versions not specified Description: The issue is related to an SQL Injection vulnerability due to the improper neutralization of special elements used in an SQL command, also known as CWE-89. This vulnerability occurs because...

VICIdial 2.14-917a SQL Injection

KL-001-2024-011: VICIdial Unauthenticated SQL Injection Title: VICIdial Unauthenticated SQL Injection Advisory ID: KL-001-2024-011 Publication Date: 2024-09-10 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2024-011.txt 1. Vulnerability Details Affected Vendor: VICIdial Affect...