EUVD-2021-33988

Malicious code in bioql PyPI...

EUVD-2022-15706

Malicious code in bioql PyPI...

EUVD-2022-2626

Malicious code in bioql PyPI...

The vulnerability of the formexeCommand()/goform/exeCommand function of the cmdinput component in the Tenda AC9 and AC15 microprogrammable routers allows a attacker to execute arbitrary commands.

The vulnerability of the formexeCommand function /goform/exeCommand of the cmdinput component in the Tenda AC9 and AC15 microprogrammed devices lies in the lack of measures to neutralize special elements used in the operating system’s command when processing the path parameter. Exploiting this...

CodeAstro Online Leave Application SQL注入漏洞

CodeAstro Online Leave Application is an online leave application system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Online Leave Application version 1.0, which stems from incorrect manipulation of the parameter absence in the file /leaveAplicationForm.php, which could lead ...

itsourcecode Online Clinic Management System SQL注入漏洞

itsourcecode Online Clinic Management System is an online clinic management system of itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Clinic Management System, which stems from an incorrect manipulation of the parameter ID in the file...

BehaviorTree.CPP 代码问题漏洞

BehaviorTree.CPP is a library for behavior trees in C++ open-sourced by BehaviorTree. A code issue vulnerability exists in BehaviorTree.CPP version 4.7.0 and earlier, which stems from incorrect manipulation of the parameter Source of the function JsonExporter::fromJson in the file...

D-Link DIR-513 Buffer Overflow Vulnerability (CNVD-2025-23468)

D-Link DIR-513 is a wireless router product from China's AUO D-Link. The D-Link DIR-513 suffers from a buffer overflow vulnerability due to incorrect manipulation of the parameter webpage in the file /goform/formWPS, no details of the vulnerability are provided at this time...

D-Link DIR-513 安全漏洞

D-Link DIR-513 is a wireless router product from China's AUO D-Link. The D-Link DIR-513 suffers from a buffer overflow vulnerability due to incorrect manipulation of the parameter webpage in the file /goform/formWPS, no details of the vulnerability are provided at this time...

CVE-2025-6544

A deserialization vulnerability exists in h2oai/h2o-3 versions = 3.46.0.8, allowing attackers to read arbitrary system files and execute arbitrary code. The vulnerability arises from improper handling of JDBC connection parameters, which can be exploited by bypassing regular expression checks and...

Tenda AC6 安全漏洞

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps. The Tenda AC6 suffers from a command injection vulnerability that stems from the formSetIptv function not validating or cleaning up special characters when handlin...

SourceCodester Student Grading System SQL注入漏洞

SourceCodester Student Grading System is a SourceCodester open source student grading system. A SQL injection vulnerability exists in SourceCodester Student Grading System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /viewstudents.php, which could lead to a...

Jasmin The Ransomware SQL注入漏洞

Jasmin The Ransomware is a powerful ransomware security testing tool used by ReadTeams, a personal developer of Siddhant Gour. Jasmin The Ransomware 1.0.1 and earlier versions suffer from a SQL injection vulnerability that stems from an incorrect manipulation of the parameter...

SourceCodester Online Polling System Code SQL注入漏洞

SourceCodester Online Polling System Code is a SourceCodester open source online polling system. SourceCodester Online Polling System Code version 1.0 has a SQL injection vulnerability, the vulnerability stems from improper handling of parameters in the /registeracc.php file, which may lead to SQ...

SourceCodester Online Polling System Code SQL注入漏洞

SourceCodester Online Polling System Code is a SourceCodester open source online polling system. A SQL injection vulnerability exists in SourceCodester Online Polling System Code version 1.0, which stems from improper handling of parameters in the /manage-profile.php file, which can lead to SQL...

SourceCodester Pet Grooming Management Software SQL注入漏洞

SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. SourceCodester Pet Grooming Management Software version 1.0 suffers from a SQL injection vulnerability that originates from improper handling of parameters in the...

Jinher OA SQL注入漏洞

Jinher OA is a collaboration management software from China Jinher Jinher. A SQL injection vulnerability exists in Jinher OA 1.2 and earlier versions, which originates from improper handling of parameters in the /C6/Jhsoft.Web.departments/GetTreeDate.aspx file, which can lead to SQL injection...

ChanCMS SQL注入漏洞

ChanCMS is a content management system developed by yanyutao0402 individual developer in China. SQL injection vulnerability exists in ChanCMS 3.3.1 and previous versions, the vulnerability stems from the incorrect operation of the parameter keyword which leads to SQL injection...

CampCodes Online Loan Management System SQL注入漏洞

CampCodes Online Loan Management System is an online loan management system from CampCodes Philippines, Inc. A SQL injection vulnerability exists in Campcodes Online Loan Management System version 1.0, which stems from an incorrect manipulation of a parameter ID resulting in SQL injection...

itsourcecode POS Point of Sale System 代码注入漏洞

POS Point of Sale System is a pos point of sale system. POS Point of Sale System suffers from a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in the scripts parameter of the...