EUVD-2025-199319

Malicious code in @faq-component/react npm...

Malicious code in @faq-component/core (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cc9231d4632473ef4031ec55df06f361942089d230a511407a1cbdce5716ed7f The package @faq-component/core was found to contain malicious code. Source: ghsa-malware...

@faq-component/react (>=0.0.1 <=1.0.0) potentially affected by unknown CVE via @faq-component/core (>=0.0.1 <=0.0.3)

@faq-component/core NPM version =0.0.1, =0.0.1, =1.0.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-191218...

EUVD-2024-27036

Malicious code in bioql PyPI...

The vulnerability of the FAQ Management System’s /endpoint/delete-faq.php script allows a hacker to execute arbitrary SQL queries against the database.

The vulnerability of the Add FAQ component of the management system’s FAQ module often stems from the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries against the database remotely...

PT-2024-18696 · Sourcecodester · Sourcecodester Loan Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester FAQ Management System version 1.0 Description: A problematic issue has been found in the Update FAQ component, where the manipulation of the Frequently Asked Question argument leads to cross-site scripting. The attack can be...

Joomla! and Mambo faq Component - 'catid' Parameter SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27822/info The Joomla! and Mambo 'faq' component is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...