EUVD-2023-32063

Malicious code in bioql PyPI...

EUVD-2025-28999

Malicious code in bioql PyPI...

EUVD-2023-57650

Malicious code in bioql PyPI...

EUVD-2025-26515

Malicious code in bioql PyPI...

EUVD-2025-9052

Malicious code in bioql PyPI...

EUVD-2025-4633

Malicious code in bioql PyPI...

EUVD-2023-2503

Malicious code in bioql PyPI...

EUVD-2022-4075

Malicious code in bioql PyPI...

EUVD-2024-16017

Malicious code in bioql PyPI...

EUVD-2022-49169

Malicious code in bioql PyPI...

EUVD-2023-55659

Malicious code in bioql PyPI...

EUVD-2024-19496

Malicious code in bioql PyPI...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...

CVE-2025-56162

CVE-2025-56162 — YOSHOP 2.0 suffers an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw('field(goods_id, ...)'), enabling: (a) enumeration/modification of DB data, including potential admi...

SUSE CVE-2025-59044

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Himmelblau 0.9.x derives numeric GIDs for Entra ID groups from the group display name when himmelblau.conf idattrmap = name the default configuration. Because Microsoft Entra ID allows multiple groups with the same...

WestJet Confirms Passenger IDs and Passports Stolen in Cyberattack

WestJet confirms a data breach starting June 13, 2025, stole passport/ID and personal data. Credit cards and passwords are safe. The airline offers 24 months of free identity monitoring, including $1M insurance...

Splunk Cloud Platform和Splunk Enterprise 访问控制错误漏洞

Splunk Cloud Platform and Splunk Enterprise are both products of Splunk Corporation, U.S.A. Splunk Cloud Platform is a powerful data collection, processing, and analytics service.Splunk Enterprise is a suite of data collection and analytics software. An access control error vulnerability exists i...

Denial Of Service (DoS)

PocketMine-MP is vulnerable to Denial Of Service DoS. The vulnerability is due to improper validation because the server does not verify uniqueness of packIds in STATUSSENDPACKS, allowing a malicious Bedrock client to send duplicate UUIDs and force repeated pack transfers until memory is exhauste...