EUVD-2025-17654

Malicious code in bioql PyPI...

EUVD-2025-17653

Malicious code in bioql PyPI...

EUVD-2024-54583

Malicious code in bioql PyPI...

EUVD-2022-6218

Malicious code in bioql PyPI...

EUVD-2025-23353

Malicious code in bioql PyPI...

EUVD-2025-17652

Malicious code in bioql PyPI...

EUVD-2025-17655

Malicious code in bioql PyPI...

EUVD-2025-14271

Malicious code in bioql PyPI...

EUVD-2022-53445

Malicious code in bioql PyPI...

EUVD-2025-11434

Malicious code in bioql PyPI...

EUVD-2025-20460

Malicious code in bioql PyPI...

EUVD-2025-23358

Malicious code in bioql PyPI...

EUVD-2024-26722

Malicious code in bioql PyPI...

CVE-2025-57423: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Content, GroupName, PersonName, lastUpdate, pool, and title. Due to insufficient input sanitisation, an unauthenticated remote attacker could inject arbitrary SQL commands via a...

CVE-2025-59743

SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'SessionID' cookie in '/inc/connect/CONNECTION.ASP'...

PT-2025-39362

Name of the Vulnerable Software and Affected Versions Prevengos version 2.44 Description A SQL injection issue exists in Prevengos version 2.44 by Nedatec Consulting. This allows an attacker to retrieve, create, update, and delete databases. The issue is triggered by sending a POST request to the...

CVE-2025-40677: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Summar Software´s Portal del Empleado. This vulnerability allows an attacker to retrieve, create, update, and delete the database by sending a POST request using the parameter “ctl00$ContentPlaceHolder1$filtroNombre” in “/MemberPages/quienesquien.aspx”...

CVE-2025-40687

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'mobilenumber', 'teamleadname' and 'teammember' parameters in the endpoint '/ofrs/admin/add-team.php'...

CVE-2025-40690

CVE-2025-40690 corresponds to a SQL injection in the Online Fire Reporting System v1.2 (PHPGurukul) where the vulnerability exists in the teamid parameter of the /ofrs/admin/edit-team.php endpoint. The root cause is unsanitized input leading to arbitrary database access, enabling an attacker to r...

CVE-2025-40691: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'todate' parameter in the endpoint '/ofrs/admin/bwdates-report-result.php'...