EUVD-2021-28757

Malicious code in bioql PyPI...

EUVD-2022-1676

Malicious code in bioql PyPI...

EUVD-2022-35227

Malicious code in bioql PyPI...

EUVD-2022-27513

Malicious code in bioql PyPI...

EUVD-2023-34145

Malicious code in bioql PyPI...

EUVD-2024-54234

Malicious code in bioql PyPI...

EUVD-2024-43953

Malicious code in bioql PyPI...

EUVD-2023-23308

Malicious code in bioql PyPI...

EUVD-2023-48199

Malicious code in bioql PyPI...

EUVD-2025-4854

Malicious code in bioql PyPI...

EUVD-2025-9690

Malicious code in bioql PyPI...

EUVD-2024-50779

Malicious code in bioql PyPI...

EUVD-2025-13582

Malicious code in bioql PyPI...

EUVD-2024-44372

Malicious code in bioql PyPI...

EUVD-2023-32351

Malicious code in bioql PyPI...

EUVD-2024-27533

Malicious code in bioql PyPI...

CVE-2025-9199: Improper Neutralization of Special Elements used in an SQL Command

The Woo superb slideshow transition gallery with random effect plugin for WordPress is vulnerable to SQL Injection via the 'woo-superb-slideshow' shortcode in all versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

CVE-2025-52041: Improper Neutralization of Special Elements used in an SQL Command

In Frappe ERPNext 15.57.5, the function getstockbalancefor at erpnext/stock/doctype/stockreconciliation/stockreconciliation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting a SQL query into the inventorydimensionsdict parameter...

CVE-2025-52043: Improper Neutralization of Special Elements used in an SQL Command

In Frappe ERPNext v15.57.5, the function importcoa at erpnext/accounts/doctype/chartofaccountsimporter/chartofaccountsimporter.py is vulnerable to SQL injection, which allows an attacker to extract all information from databases by injecting a SQL query into the company parameter...

E-Commerce Website pages/admin_product_details.php file SQL Injection Vulnerability

E-Commerce Website is an e-commerce website. E-Commerce Website suffers from a SQL injection vulnerability that originates from the pages/adminproductdetails.php file that does not perform security filtering on the prodid parameter. An attacker can exploit this vulnerability by manipulating the...