1950 matches found
EUVD-2025-13987
Malicious code in bioql PyPI...
EUVD-2024-50426
Malicious code in bioql PyPI...
EUVD-2023-30320
Malicious code in bioql PyPI...
EUVD-2022-34269
Malicious code in bioql PyPI...
EUVD-2022-53113
Malicious code in bioql PyPI...
EUVD-2024-41337
Malicious code in bioql PyPI...
EUVD-2025-24242
Malicious code in bioql PyPI...
EUVD-2022-4051
Malicious code in bioql PyPI...
EUVD-2025-3111
Malicious code in bioql PyPI...
EUVD-2025-31717
Malicious code in bioql PyPI...
EUVD-2025-14756
Malicious code in bioql PyPI...
EUVD-2024-52764
Malicious code in bioql PyPI...
EUVD-2025-25408
Malicious code in bioql PyPI...
EUVD-2025-22319
Malicious code in bioql PyPI...
AndSoft e-TMS 命令注入漏洞
AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from an operating system command injection vulnerability that originates from a misuse of the parameter m in the file /clt/LOGINFRMCAT.ASP, which can be exploited by an attacker to execute operating system...
CVE-2025-41098
Insecure Direct Object Reference IDOR vulnerability in BOLD Workplanner in versions prior to 2.5.25 4935b438f9b, consisting of a misuse of the general enquiry web service...
CVE-2025-41098
CVE-2025-41098 affects Bold Workplanner. The issue is an Insecure Direct Object Reference (IDOR) resulting from misuse of the General Enquiry web service, impacting versions prior to 2.5.25 (build 4935b438f9b). Public sources across multiple databases confirm an IDOR vulnerability without exposed...
A week in security (September 22 – September 28)
Last week on Malwarebytes Labs: Hackers threaten parents: Get nursery to pay ransom or we leak your child’s data Google and Flo to pay $56 million after misusing users’ health data Neon App pays users to record their phone calls, sells data for AI training updated New SVG-based phishing campaign ...
Langley Online Banking System 代码注入漏洞
Langley Online Banking System is an online banking system from Langley Corporation. A code injection vulnerability exists in the Langley Online Banking System, which originates from a misuse of the parameter Error in file /connectionerror.php and could lead to a cross-site scripting attack...