15 matches found
EUVD-2020-0064
Malware in sbrugna...
EUVD-2020-16001
Malware in sbrugna...
EUVD-2002-2288
Malware in sbrugna...
EUVD-2024-49602
Malicious code in bioql PyPI...
EUVD-2022-26557
Malicious code in bioql PyPI...
EUVD-2025-15682
Malicious code in bioql PyPI...
EUVD-2024-34255
Malicious code in bioql PyPI...
EUVD-2025-5506
Malicious code in bioql PyPI...
CVE-2025-47575
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in mojoomla School Management allows SQL Injection. This issue affects School Management: from n/a through 92.0.0...
GHSA-XWX7-P63R-2RJ8 Navidrome Stores JWT Secret in Plaintext in navidrome.db
Navidrome stores the JWT secret in plaintext in the navidrome.db database file under the property table. This practice introduces a security risk because anyone with access to the database file can retrieve the secret. The JWT secret is critical for the authentication and authorization system. If...
Open Solutions for Education openSIS SQL Injection Vulnerability
Open Solutions for Education openSIS is a U.S. Open Solutions for Education, Inc. open source student information management system . A SQL injection vulnerability exists in Open Solutions for Education openSIS 7.4 and prior versions. The vulnerability stems from a lack of validation of externall...
Red Sail OA system has SQL injection vulnerability
Redfan OA is based on SOA architecture, with EIP enterprise information portal and BPM business process engine as the core. Red Sail OA system has SQL injection vulnerability, attackers can use the vulnerability to obtain database sensitive information...
[HV-HIGH] Microsoft Jet DB engine vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Microsoft Jet DB engine vulnerabilities Classification: =============== Level: low-med-HIGH-crit ID: HEXVIEW200503311 URL: http://www.hexview.com/docs/20050331-1.txt Overview: ========= Microsoft Jet database is a lightweight database widely used by M...
Aardvark Topsites < 4.1.0 - Multiple Vulnerabilities
Aardvark Topsites Multiple Vulnerabilities Vendor: Aardvark Industries Product: Aardvark Topsites Version: = 4.1.0 Website: http://www.aardvarkind.com/ BID: 9231 Description: Aardvark Topsites is a popular free PHP topsites script. See URL for details. Plaintext Database Pass Weakness: The login...
MPCSoftWeb 1.0 - Database Disclosure
MPCSoftWeb 1.0 - Database Disclosure source: https://www.securityfocus.com/bid/7390/info MPCSoftWeb does not sufficiently secure the database file. It is possible for remote attackers to request the database file and gain access to sensitive information such as administrative credentials for the...