EUVD-2025-21717

Malicious code in bioql PyPI...

EUVD-2024-25115

Malicious code in bioql PyPI...

EUVD-2022-28635

Malicious code in bioql PyPI...

EUVD-2021-30542

Malicious code in bioql PyPI...

EUVD-2021-30956

Malicious code in bioql PyPI...

EUVD-2021-30953

Malicious code in bioql PyPI...

EUVD-2024-25114

Malicious code in bioql PyPI...

EUVD-2021-30955

Malicious code in bioql PyPI...

EUVD-2025-22548

Malicious code in bioql PyPI...

EUVD-2022-30908

Malicious code in bioql PyPI...

PT-2025-40452

Name of the Vulnerable Software and Affected Versions MyClub version 0.5 Description A SQL injection issue exists in MyClub version 0.5. Insufficient input sanitisation in the /articles API endpoint allows an unauthenticated remote attacker to inject arbitrary SQL commands via a crafted GET...

📄 Easy Hosting Control Panel 20.04.1.b SQL Injection

Easy Hosting Control Panel version 20.04.1.b suffers from a remote SQL injection vulnerability in the listdomains function via the arananalan POST parameter. Title: Easy Hosting Control Panel EHCP 20.04.1.b - SQL Injection in the listdomains function via the arananalan POST parameter Description:...

CVE-2025-54379

LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability in the getLast API functionality of the eKuiper project. This flaw allows unauthenticated remote...

CVE-2025-54379

LF Edge eKuiper is a lightweight IoT data analytics and stream processing engine running on resource-constraint edge devices. In versions before 2.2.1, there is a critical SQL Injection vulnerability in the getLast API functionality of the eKuiper project. This flaw allows unauthenticated remote...

CVE-2025-54379

CVE-2025-54379 affects LF Edge eKuiper prior to version 2.2.1, where the getLast API builds SQL using user-supplied table names, enabling unauthenticated remote attackers to execute arbitrary SQL on the SQLite database. The underlying root cause is unsanitized interpolation of the table name into...

eKuiper API endpoints handling SQL queries with user-controlled table names.

Summary A critical SQL Injection vulnerability exists in the getLast API functionality of the eKuiper project. This flaw allows unauthenticated remote attackers to execute arbitrary SQL statements on the underlying SQLite database by manipulating the table name input in an API request. Exploitati...

GHSA-526J-MV3P-F4VV eKuiper API endpoints handling SQL queries with user-controlled table names.

Summary A critical SQL Injection vulnerability exists in the getLast API functionality of the eKuiper project. This flaw allows unauthenticated remote attackers to execute arbitrary SQL statements on the underlying SQLite database by manipulating the table name input in an API request. Exploitati...

PT-2025-30707 · Lf Edge · Ekuiper

Name of the Vulnerable Software and Affected Versions: LF Edge eKuiper versions prior to 2.2.1 Description: A critical SQL Injection vulnerability exists in the getLast API functionality of the eKuiper project. This flaw allows unauthenticated remote attackers to execute arbitrary SQL statements ...

CVE-2025-54062

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in versions prior to 3.4.6 in the /html/funcionario/profiledependente.php endpoint, specifically in the iddependente parameter. This vulnerability...

CVE-2025-53937

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A SQL Injection vulnerability was identified in the /controle/control.php endpoint, specifically in the cargo parameter, of WeGIA prior to version 3.4.5. This vulnerability allows attackers to...