EUVD-2023-40989

Malicious code in bioql PyPI...

EUVD-2024-31877

Malicious code in bioql PyPI...

EUVD-2025-9717

Malicious code in bioql PyPI...

EUVD-2022-40946

Malicious code in bioql PyPI...

EUVD-2023-27651

Malicious code in bioql PyPI...

EUVD-2022-26101

Malicious code in bioql PyPI...

EUVD-2025-32048

Malicious code in bioql PyPI...

EUVD-2024-45833

Malicious code in bioql PyPI...

EUVD-2022-4425

Malicious code in bioql PyPI...

EUVD-2025-17598

Malicious code in bioql PyPI...

EUVD-2023-32347

Malicious code in bioql PyPI...

EUVD-2023-27779

Malicious code in bioql PyPI...

EUVD-2025-5296

Malicious code in bioql PyPI...

EUVD-2022-51656

Malicious code in bioql PyPI...

EUVD-2025-9314

Malicious code in bioql PyPI...

MyClub 安全漏洞

MyClub is a club management software for jibux individual developers. A security vulnerability exists in MyClub version 0.5, which stems from insufficient cleanup of query parameter inputs and could lead to an SQL injection attack...

PT-2025-39989

Name of the Vulnerable Software and Affected Versions Frappe ERPNext version 15.57.5 Description The import coa function located at erpnext/accounts/doctype/chart of accounts importer/chart of accounts importer.py is susceptible to SQL injection. An attacker can inject a SQL query through the...

CVE-2025-11105

A flaw has been found in code-projects Simple Scheduling System 1.0. This affects an unknown part of the file /schedulingsystem/addsubject.php. This manipulation of the argument subcode causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

CVE-2025-11052

A security flaw has been discovered in kidaze CourseSelectionSystem 1.0/5.php. The impacted element is an unknown function of the file /Profilers/PriProfile/COUNT3s5.php. Performing manipulation of the argument csslc results in sql injection. The attack can be initiated remotely. The exploit has...

CVE-2025-57317

apidoc-core is the core parser library to generate apidoc result following the apidoc-spec. A Prototype Pollution vulnerability in the preProcess function of apidoc-core versions thru 0.15.0 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial ...