EUVD-2022-38066

Malicious code in bioql PyPI...

EUVD-2022-38064

Malicious code in bioql PyPI...

EUVD-2024-21313

Malicious code in bioql PyPI...

EUVD-2024-21319

Malicious code in bioql PyPI...

EUVD-2025-10117

Malicious code in bioql PyPI...

EUVD-2024-21322

Malicious code in bioql PyPI...

EUVD-2024-21299

Malicious code in bioql PyPI...

EUVD-2022-5914

Malicious code in bioql PyPI...

EUVD-2022-47983

Malicious code in bioql PyPI...

EUVD-2025-7702

Malicious code in bioql PyPI...

EUVD-2025-25897

Malicious code in bioql PyPI...

EUVD-2025-10045

Malicious code in bioql PyPI...

EUVD-2022-38116

Malicious code in bioql PyPI...

EUVD-2025-27292

Malicious code in bioql PyPI...

WordPress plugin WP Dispatcher SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to set up personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL...

G_variant_byteswap() can take a long time with some non-normal inputs

...

AndSoft e-TMS 跨站脚本漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. A cross-site scripting vulnerability exists in AndSoft e-TMS v25.03, which originates from the lack of effective filtering and escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the fi...

ERPNEXT 安全漏洞

ERPNext is an open source enterprise resource planning solution from ERPNext India. ERPNext suffers from a SQL injection vulnerability that stems from the lack of validation of the orderby and groupby parameters against externally entered SQL statements. An attacker can exploit this vulnerability...

AndSoft e-TMS 跨站脚本漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file...

Frappe Technologies Frappe 安全漏洞

Frappe Technologies Frappe is a Python, Mariadb-based web development framework with integrated front-end pages from Frappe Technologies, India. A security vulnerability exists in Frappe Technologies Frappe version 15.57.5, which stems from unvalidated inputs in the blanketordertype parameter,...