EUVD-2025-2110

Malicious code in bioql PyPI...

EUVD-2024-3357

Malicious code in bioql PyPI...

EUVD-2025-18774

Malicious code in bioql PyPI...

EUVD-2024-18435

Malicious code in bioql PyPI...

EUVD-2022-40696

Malicious code in bioql PyPI...

EUVD-2023-54274

Malicious code in bioql PyPI...

EUVD-2023-39026

Malicious code in bioql PyPI...

EUVD-2025-15148

Malicious code in bioql PyPI...

EUVD-2025-8717

Malicious code in bioql PyPI...

EUVD-2025-18964

Malicious code in bioql PyPI...

EUVD-2024-54480

Malicious code in bioql PyPI...

EUVD-2025-8544

Malicious code in bioql PyPI...

EUVD-2025-24458

Malicious code in bioql PyPI...

EUVD-2021-8133

Malicious code in bioql PyPI...

EUVD-2023-50528

Malicious code in bioql PyPI...

CVE-2025-59738

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRMBET.ASP'...

CVE-2025-59735

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRM.ASP'...

CVE-2025-59741

AndSoft e-TMS v25.03 suffers an OS command injection that can be triggered by sending a POST request to /CLT/LOGINERRORFRM.ASP with the m parameter. Multiple connected sources (CNVD-2025-23538, NVD/CVE-2025-59741, CNNVD-202510-331, PT-2025-40361) confirm the vulnerability exists and that an attac...

CVE-2025-59739

CVE-2025-59739 describes an OS command‑injection in AndSoft’s e‑TMS v25.03. The root cause is misuse of the m parameter in the request path /clt/LOGINFRM_original.ASP , exploitable via a POST to execute arbitrary commands on the server. Impact: potential full server compromise (as supported by CV...

CVE-2025-10659 MegaSys Enterprises Telenium Online Web Application OS Command Injection

The Telenium Online Web Application is vulnerable due to a PHP endpoint accessible to unauthenticated network users that improperly handles user-supplied input. This vulnerability occurs due to the insecure termination of a regular expression check within the endpoint. Because the input is not...