EUVD-2024-47533

Malicious code in bioql PyPI...

EUVD-2022-39805

Malicious code in bioql PyPI...

EUVD-2022-39219

Malicious code in bioql PyPI...

EUVD-2022-48472

Malicious code in bioql PyPI...

EUVD-2021-9986

Malicious code in bioql PyPI...

EUVD-2022-5663

Malicious code in bioql PyPI...

EUVD-2023-58600

Malicious code in bioql PyPI...

EUVD-2023-52858

Malicious code in bioql PyPI...

EUVD-2023-45816

Malicious code in bioql PyPI...

EUVD-2022-48579

Malicious code in bioql PyPI...

EUVD-2024-48947

Malicious code in bioql PyPI...

EUVD-2021-31408

Malicious code in bioql PyPI...

EUVD-2023-46058

Malicious code in bioql PyPI...

EUVD-2022-52601

Malicious code in bioql PyPI...

EUVD-2022-53266

Malicious code in bioql PyPI...

EUVD-2022-40946

Malicious code in bioql PyPI...

EUVD-2023-34582

Malicious code in bioql PyPI...

CVE-2025-50234

MCCMS v2.7.0 has an SSRF vulnerability located in the index method of the sys\apps\controllers\api\Gf.php file, where the pic parameter is processed. The pic parameter is decrypted using the sysauth$pic, 1 function, which utilizes a hard-coded key McEncryptionKey bD2voYwPpNuJ7B8, defined in the...

CVE-2025-50870

Institute-of-Current-Students 1.0 is vulnerable to Incorrect Access Control in the mydetailsstudent.php endpoint. The myds GET parameter accepts an email address as input and directly returns the corresponding student's personal information without validating the identity or permissions of the...

BIT-PYTHON-2024-12718 Bypass extraction filter to modify file metadata outside extraction directory

Allows modifying some file metadata e.g. last modified with filter="data" or file permissions chmod with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or...