3 matches found
EUVD-2025-26417
Malicious code in bioql PyPI...
CVE-2025-55472
SQL Injection vulnerability exists in Tirreno v0.9.5, specifically in the /admin/loadUsers API endpoint. The vulnerability arises due to unsafe handling of user-supplied input in the columns0data parameter, which is directly used in SQL queries without proper validation or parameterization...
CVE-2025-55472
Tirreno v0.9.5 contains a SQL Injection vulnerability in the /admin/loadUsers API endpoint due to unsafe handling of the columns[0][data] input, which is directly used in SQL queries without proper validation or parameterization. The issue could allow arbitrary SQL execution, with the current sou...