EUVD-2025-30843

Malicious code in bioql PyPI...

EUVD-2025-28906

Malicious code in bioql PyPI...

EUVD-2025-31468

Malicious code in bioql PyPI...

EUVD-2025-25025

Malicious code in bioql PyPI...

EUVD-2025-25735

Malicious code in bioql PyPI...

EUVD-2025-28717

Malicious code in bioql PyPI...

EUVD-2025-26334

Malicious code in bioql PyPI...

EUVD-2025-29813

Malicious code in bioql PyPI...

EUVD-2025-27489

Malicious code in bioql PyPI...

EUVD-2025-26192

Malicious code in bioql PyPI...

EUVD-2025-28716

Malicious code in bioql PyPI...

EUVD-2025-31461

Malicious code in bioql PyPI...

EUVD-2025-26159

Malicious code in bioql PyPI...

EUVD-2022-52310

Malicious code in bioql PyPI...

CVE-2025-54153

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 2025/07/31...

CVE-2025-54153

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 2025/07/31...

CVE-2024-56804

An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.4 and later...

EUVD-2025-32325

An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.4 and later...

CVE-2025-40636

The CVE-2025-40636 entry describes a SQL injection in the Joomla module mod_vvisit_counter (version v2.0.4j3 ). The vulnerability stems from improper handling of the cookie parameter cip_vvisitcounter , allowing an attacker to retrieve database content at endpoints where the plugin counts visits....

CVE-2025-10582 WP Dispatcher <= 1.2.0 - Authenticated (Contributor+) SQL Injection

The WP Dispatcher plugin for WordPress is vulnerable to SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticat...