EUVD-2025-4261

Malicious code in bioql PyPI...

CVE-2024-53543

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the addProject method in the smarttimeplus/MySQLConnection endpoint...

CVE-2024-53543

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the addProject method in the smarttimeplus/MySQLConnection endpoint...

CVE-2024-53544

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the getCookieNames method in the smarttimeplus/MySQLConnection endpoint...

CVE-2024-53543

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the addProject method in the smarttimeplus/MySQLConnection endpoint...

CVE-2024-53544

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the getCookieNames method in the smarttimeplus/MySQLConnection endpoint...

CVE-2024-53543

CVE-2024-53543 affects NovaCHRON Zeitsysteme Smart Time Plus (v8.x to v8.6). The vulnerability is a SQL injection via the addProject method in the smarttimeplus/MySQLConnection endpoint. Connected sources confirm the affected versions and the vulnerable component but do not provide exploit detail...

CVE-2024-53544

NovaCHRON Zeitsysteme Smart Time Plus (v8.x–v8.6) is affected by a SQL injection in getCookieNames under smarttimeplus/MySQLConnection. Root cause: improper handling of user-controlled input leading to injectable queries. Impact is HIGH on confidentiality, integrity, and availability per CVSS 3.1...

CVE-2024-53544

NovaCHRON Zeitsysteme GmbH & Co. KG Smart Time Plus v8.x to v8.6 was discovered to contain a SQL injection vulnerability via the getCookieNames method in the smarttimeplus/MySQLConnection endpoint...