EUVD-2025-28905

Malicious code in bioql PyPI...

EUVD-2025-28902

Malicious code in bioql PyPI...

EUVD-2025-11445

Malicious code in bioql PyPI...

EUVD-2023-1118

Malicious code in bioql PyPI...

EUVD-2022-1219

Malicious code in bioql PyPI...

EUVD-2024-47301

Malicious code in bioql PyPI...

EUVD-2024-36875

Malicious code in bioql PyPI...

EUVD-2024-38570

Malicious code in bioql PyPI...

EUVD-2021-28663

Malicious code in bioql PyPI...

EUVD-2025-24455

Malicious code in bioql PyPI...

EUVD-2025-20464

Malicious code in bioql PyPI...

EUVD-2024-52702

Malicious code in bioql PyPI...

EUVD-2024-27402

Malicious code in bioql PyPI...

EUVD-2022-32614

Malicious code in bioql PyPI...

CVE-2025-59743

SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'SessionID' cookie in '/inc/connect/CONNECTION.ASP'...

CVE-2025-59742

SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'USRMAIL' parameter in'/inc/login/TRACKREQUESTFRMSQL.ASP'...

CVE-2025-59743 Multiple vulnerabilities in AndSoft's e-TMS

SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'SessionID' cookie in '/inc/connect/CONNECTION.ASP'...

CVE-2025-52042

In Frappe ERPNext 15.57.5, the function getrfqcontainingsupplier at erpnext/buying/doctype/requestforquotation/requestforquotation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query via the txt parameter...

CVE-2025-52043

CVE-2025-52043 affects Frappe ERPNext v15.57.5, where the import_coa() function in ERPNext’s chart_of_accounts_importer.py is vulnerable to SQL injection via the company parameter. This allows an attacker to extract database data. Connected sources corroborate a SQL injection in the import_coa fu...

Code-Projects Simple Scheduling System SQL注入漏洞

Simple Scheduling System is a simple scheduling system. Simple Scheduling System has a SQL injection vulnerability that originates from the starttime/endtime parameters in the /addtime.php file not being securely filtered. An attacker can exploit this vulnerability to execute malicious SQL comman...