9354 matches found
CVE-2025-40886: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SQL statements on the DBMS used by the web application, potentially exposing unauthorized data, altering...
CVE-2025-36355: Inclusion of Functionality from Untrusted Control Sphere
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to execute malicious scripts from outside of its control sphere...
Lovable VDP: Users can change project visibility which requires high subscription by just changing request body
A Broken Access Control vulnerability was discovered that allowed users to change project visibility to higher subscription tiers by modifying the request body. The visibility was changed from the default setting to Personal or Workspace, bypassing subscription checks and enabling unauthorized...
EUVD-2022-36198
Malicious code in bioql PyPI...
EUVD-2025-25869
Malicious code in bioql PyPI...
EUVD-2024-42218
Malicious code in bioql PyPI...
EUVD-2023-43864
Malicious code in bioql PyPI...
EUVD-2024-44447
Malicious code in bioql PyPI...
EUVD-2024-30613
Malicious code in bioql PyPI...
EUVD-2024-54641
Malicious code in bioql PyPI...
EUVD-2024-33589
Malicious code in bioql PyPI...
EUVD-2022-33813
Malicious code in bioql PyPI...
EUVD-2023-43726
Malicious code in bioql PyPI...
EUVD-2023-42123
Malicious code in bioql PyPI...
EUVD-2025-25126
Malicious code in bioql PyPI...
EUVD-2024-36659
Malicious code in bioql PyPI...
EUVD-2025-11511
Malicious code in bioql PyPI...
EUVD-2022-28264
Malicious code in bioql PyPI...