EUVD-2023-39000

Malicious code in bioql PyPI...

EUVD-2023-34105

Malicious code in bioql PyPI...

EUVD-2024-34373

Malicious code in bioql PyPI...

EUVD-2024-16685

Malicious code in bioql PyPI...

EUVD-2022-4276

Malicious code in bioql PyPI...

EUVD-2022-2832

Malicious code in bioql PyPI...

EUVD-2025-4276

Malicious code in bioql PyPI...

EUVD-2025-9798

Malicious code in bioql PyPI...

EUVD-2023-30249

Malicious code in bioql PyPI...

CVE-2025-56697

A Stored Cross-Site Scripting XSS vulnerability was discovered in the /users/adminpanel/admin/home.php?page=feedbacks file of Kashipara Computer Base Test v1.0. Attackers can inject malicious scripts via the smyFeedbacks POST parameter in /users/home.php...

GitHub's Copilot Code Review: Can AI Spot Security Flaws Before You Commit?

As software development practices increasingly adopt AI-powered tools, ensuring that such tools can support secure coding has become critical. This study evaluates the effectiveness of GitHub Copilot's recently introduced code review feature in detecting security vulnerabilities. Using a curated...

PT-2025-37919

Name of the Vulnerable Software and Affected Versions: Kashipara Computer Base Test version 1.0 Description: A Stored Cross-Site Scripting XSS vulnerability exists in the /users/adminpanel/admin/home.php?page=feedbacks file. Attackers can inject malicious scripts via the smyFeedbacks POST paramet...

cosmicdbsemantic (>=0.0.1, <=0.0.23), drf-account (0.0.1) +3 more potentially affected by CVE-2025-57833 via django (2.0.5)

django PYPI version 2.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cosmicdbsemantic =0.0.1, =0.9.2, =0.9.5 Source cves: CVE-2025-57833 Source advisory: OSV:GHSA-6W2R-R2M5-XQ5W...

Moodle Feedback Component Unauthorized Communication

The vulnerability of the Feedback component in the virtual learning environment Moodle is related to improper access control. Exploiting this vulnerability could allow a malicious actor to communicate with arbitrary users remotely...

Linux Distros Unpatched Vulnerability : CVE-2025-26526

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities. CVE-2025-265...

Linux Distros Unpatched Vulnerability : CVE-2017-12156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Moodle 3.x has XSS in the contact form on the non-respondents page in non-anonymous feedback. CVE-2017-12156 Note that Nessus relies on the presence of the...

Linux Distros Unpatched Vulnerability : CVE-2024-43438

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Feedback. Bulk messaging in the activity's non-respondents report did not verify message recipients belonging to the set of users returned b...

Linux Distros Unpatched Vulnerability : CVE-2024-43434

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The bulk message sending feature in Moodle's Feedback module's non-respondents report had an incorrect CSRF token check, leading to a CSRF vulnerability...

CVE-2025-9473

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly an...

CVE-2025-9473 SourceCodester Online Bank Management System feedback.php sql injection

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly an...