EUVD-2025-4261

Malicious code in bioql PyPI...

CVE-2024-53543

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the addProject method in the smarttimeplus/MySQLConnection endpoint...

CVE-2024-53544

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the getCookieNames method in the smarttimeplus/MySQLConnection endpoint...

CVE-2024-53543

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the addProject method in the smarttimeplus/MySQLConnection endpoint...

CVE-2024-53543

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the addProject method in the smarttimeplus/MySQLConnection endpoint...

CVE-2024-53544

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus versions v8.x through v8.6 are vulnerable to a SQL injection vulnerability. The flaw exists in the getCookieNames method within the smarttimeplus/MySQLConnection endpoint, caused by the improper neutralization of special elements used in an SQL ...

CVE-2024-53544

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the getCookieNames method in the smarttimeplus/MySQLConnection endpoint...

CVE-2024-53544: Improper Neutralization of Special Elements used in an SQL Command

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the getCookieNames method in the smarttimeplus/MySQLConnection endpoint...

CVE-2024-53543: Improper Neutralization of Special Elements used in an SQL Command

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the addProject method in the smarttimeplus/MySQLConnection endpoint...

CVE-2024-53544

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the getCookieNames method in the smarttimeplus/MySQLConnection endpoint...

CVE-2024-53543

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus versions v8.x through v8.6 are susceptible to a SQL injection vulnerability. The flaw exists in the addProject method within the smarttimeplus/MySQLConnection endpoint. While separate documentation mentions a different issue regarding improper a...

PT-2025-7799

Name of the Vulnerable Software and Affected Versions NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus versions 8.x through 8.6 Description A SQL injection issue was found in the getCookieNames method via the "smarttimeplus/MySQLConnection" endpoint. Recommendations For versions 8.x through 8....