EUVD-2025-24966

Malicious code in bioql PyPI...

EUVD-2025-1835

Malicious code in bioql PyPI...

EUVD-2025-14989

Malicious code in bioql PyPI...

EUVD-2025-25102

Malicious code in bioql PyPI...

EUVD-2025-24634

Malicious code in bioql PyPI...

EUVD-2025-2126

Malicious code in bioql PyPI...

EUVD-2025-17585

Malicious code in bioql PyPI...

EUVD-2025-31419

Malicious code in bioql PyPI...

EUVD-2025-14098

Malicious code in bioql PyPI...

EUVD-2024-50791

Malicious code in bioql PyPI...

EUVD-2025-20157

Malicious code in bioql PyPI...

EUVD-2025-29114

Malicious code in bioql PyPI...

EUVD-2025-29123

Malicious code in bioql PyPI...

EUVD-2025-31445

Malicious code in bioql PyPI...

CVE-2025-11069

A vulnerability was determined in westboy CicadasCMS 1.0. Affected by this issue is some unknown functionality of the file /system/org/save of the component Add Department Handler. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotel...

CVE-2025-11139

A vulnerability was determined in Bjskzy Zhiyou ERP up to 11.0. Affected is the function uploadStudioFile of the component com.artery.form.services.FormStudioUpdater. This manipulation of the argument filepath causes path traversal. Remote exploitation of the attack is possible. The exploit has...

PT-2025-39806

Name of the Vulnerable Software and Affected Versions mirweiye wenkucms versions up to 3.4 Description A flaw exists that allows for remote operating system command injection. This occurs due to manipulation of the createPathOne function within the app/common/common.php file. The exploit has been...

CVE-2025-11076

A vulnerability was found in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/editteacher.php. Performing manipulation of the argument department results in sql injection. Remote exploitation of the attack is possible. The exploit has been made...

CVE-2025-11097

CVE-2025-11097 affects D-Link DIR-823X firmware 250416. The root cause is a command injection in the /goform/set_device_name handler caused by manipulating the mac parameter. The vulnerability is exploitable remotely and has been publicly disclosed. Multiple sources (NVD, Red Hat, CNVD, CNVD) cor...

PT-2025-39788

Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1 Description A buffer overflow issue exists in the formWrlExtraGet function of the /goform/GstDhcpSetSer file. Manipulation of the dips argument can trigger this issue, allowing for remote exploitation. A public explo...