EUVD-2025-11396

Malicious code in bioql PyPI...

EUVD-2025-11405

Malicious code in bioql PyPI...

EUVD-2025-11400

Malicious code in bioql PyPI...

EUVD-2025-11401

Malicious code in bioql PyPI...

EUVD-2025-11436

Malicious code in bioql PyPI...

EUVD-2025-11428

Malicious code in bioql PyPI...

EUVD-2025-11416

Malicious code in bioql PyPI...

EUVD-2025-11392

Malicious code in bioql PyPI...

EUVD-2022-31405

Malicious code in bioql PyPI...

EUVD-2024-45995

Malicious code in bioql PyPI...

EUVD-2024-36875

Malicious code in bioql PyPI...

EUVD-2024-3622

Malicious code in bioql PyPI...

EUVD-2025-24455

Malicious code in bioql PyPI...

CVE-2025-59743

SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'SessionID' cookie in '/inc/connect/CONNECTION.ASP'...

CVE-2025-59742

SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'USRMAIL' parameter in'/inc/login/TRACKREQUESTFRMSQL.ASP'...

CVE-2025-59743 Multiple vulnerabilities in AndSoft's e-TMS

SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'SessionID' cookie in '/inc/connect/CONNECTION.ASP'...

CVE-2025-52042

In Frappe ERPNext 15.57.5, the function getrfqcontainingsupplier at erpnext/buying/doctype/requestforquotation/requestforquotation.py is vulnerable to SQL Injection, which allows an attacker to extract all information from databases by injecting SQL query via the txt parameter...

CVE-2025-52043

CVE-2025-52043 affects Frappe ERPNext v15.57.5, where the import_coa() function in ERPNext’s chart_of_accounts_importer.py is vulnerable to SQL injection via the company parameter. This allows an attacker to extract database data. Connected sources corroborate a SQL injection in the import_coa fu...

Code-Projects Simple Scheduling System SQL注入漏洞

Simple Scheduling System is a simple scheduling system. Simple Scheduling System has a SQL injection vulnerability that originates from the starttime/endtime parameters in the /addtime.php file not being securely filtered. An attacker can exploit this vulnerability to execute malicious SQL comman...

CVE-2025-60110 WordPress AllInOne - Banner Rotator Plugin <= 3.8 - SQL Injection Vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in LambertGroup AllInOne - Banner Rotator all-in-one-bannerRotator allows SQL Injection.This issue affects AllInOne - Banner Rotator: from n/a through = 3.8...