EUVD-2022-44432

Malicious code in bioql PyPI...

EUVD-2021-8766

Malicious code in bioql PyPI...

EUVD-2025-20481

Malicious code in bioql PyPI...

EUVD-2022-27683

Malicious code in bioql PyPI...

EUVD-2022-30674

Malicious code in bioql PyPI...

EUVD-2021-8731

Malicious code in bioql PyPI...

EUVD-2022-44417

Malicious code in bioql PyPI...

EUVD-2022-53439

Malicious code in bioql PyPI...

EUVD-2024-47244

Malicious code in bioql PyPI...

EUVD-2022-27685

Malicious code in bioql PyPI...

EUVD-2022-30677

Malicious code in bioql PyPI...

EUVD-2021-8738

Malicious code in bioql PyPI...

EUVD-2024-32354

Malicious code in bioql PyPI...

CVE-2025-11109

CVE-2025-11109 affects Campcodes Computer Sales and Inventory System 1.0. The vulnerability is a SQL injection in the parameter ID of the file /pages/us_edit.php?action=edit, allowing remote exploitation. Public exploits exist. Several sources corroborate the flaw and its remote exploitability, w...

PT-2025-39727

Name of the Vulnerable Software and Affected Versions Campcodes Online Learning Management System version 1.0 Description A flaw exists in Campcodes Online Learning Management System that allows for SQL injection. The issue is located in the processing of the /admin/edit department.php file...

PT-2025-39151

Name of the Vulnerable Software and Affected Versions Campcodes Society Membership Information System version 1.0 Description A flaw exists in Campcodes Society Membership Information System that allows for remote SQL injection. The issue stems from improper handling of the student id argument...

CVE-2025-10471

ZKEACMS 4.3 is affected by a server-side request forgery in the Proxy function of src/ZKEACMS/Controllers/MediaController.cs. Manipulating the url argument enables remote exploitation, and public exploits exist. Impact is SSRF with potential access to internal resources; CVSS specifics vary by so...

CVE-2025-10291 linlinjava litemall cancel WxAftersaleController improper authorization

A weakness has been identified in linlinjava litemall up to 1.8.0. This affects the function WxAftersaleController of the file /wx/aftersale/cancel. Executing manipulation of the argument ID can lead to improper authorization. The attack can be executed remotely. The exploit has been made availab...

CVE-2025-41701

An unauthenticated attacker can trick a local user into executing arbitrary commands by opening a deliberately manipulated project file with an affected engineering tool. These arbitrary commands are executed in the user context...

CVE-2025-59014

An uncaught exception in the Bookmark Toolbar of TYPO3 CMS versions 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 lets administrator‑level backend users trigger a denial‑of‑service condition in the backend user interface by saving manipulated data in the bookmark toolbar...