EUVD-2022-43406

Malicious code in bioql PyPI...

EUVD-2022-40913

Malicious code in bioql PyPI...

EUVD-2022-44732

Malicious code in bioql PyPI...

EUVD-2022-44191

Malicious code in bioql PyPI...

EUVD-2025-22449

Malicious code in bioql PyPI...

EUVD-2025-16286

Malicious code in bioql PyPI...

EUVD-2022-3042

Malicious code in bioql PyPI...

EUVD-2022-44697

Malicious code in bioql PyPI...

EUVD-2022-35251

Malicious code in bioql PyPI...

EUVD-2023-53646

Malicious code in bioql PyPI...

EUVD-2022-30164

Malicious code in bioql PyPI...

EUVD-2023-36235

Malicious code in bioql PyPI...

EUVD-2021-32813

Malicious code in bioql PyPI...

EUVD-2022-44582

Malicious code in bioql PyPI...

EUVD-2022-45231

Malicious code in bioql PyPI...

EUVD-2023-41713

Malicious code in bioql PyPI...

CVE-2025-11138 mirweiye wenkucms common.php createPathOne os command injection

A vulnerability was found in mirweiye wenkucms up to 3.4. This impacts the function createPathOne of the file app/common/common.php. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2025-11089

A vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This impacts an unknown function of the file /Profilers/PriProfile/COUNT3s4.php. Executing manipulation of the argument cbranch can lead to sql injection. It is possible to launch the...

CVE-2025-10945

A security vulnerability has been detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. Impacted is an unknown function of the file d.php. Such manipulation of the argument hm leads to cross site scripting. The attack may be launched remotely. This product operates on a rolli...

smsboom code injection vulnerability

smsboom is an SMS bombing software by the individual developer of QuitDropdatabaseFalse. A code injection vulnerability exists in smsboom 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674 and prior versions, which stems from a misuse of the parameter hm in the file dy.php, and could lead to a cross-site...