EUVD-2023-27060

Malicious code in bioql PyPI...

EUVD-2024-35277

Malicious code in bioql PyPI...

EUVD-2023-50145

Malicious code in bioql PyPI...

EUVD-2025-2664

Malicious code in bioql PyPI...

EUVD-2025-27272

Malicious code in bioql PyPI...

EUVD-2022-5295

Malicious code in bioql PyPI...

EUVD-2022-5717

Malicious code in bioql PyPI...

EUVD-2022-30072

Malicious code in bioql PyPI...

EUVD-2024-21969

Malicious code in bioql PyPI...

EUVD-2023-46304

Malicious code in bioql PyPI...

EUVD-2024-20145

Malicious code in bioql PyPI...

EUVD-2023-35456

Malicious code in bioql PyPI...

EUVD-2023-33938

Malicious code in bioql PyPI...

EUVD-2025-6705

Malicious code in bioql PyPI...

CVE-2025-10009 Authenticated admin RCE in Invoice Ninja

Incorrect handling of uploaded files in the admin "Restore" function in Invoice Ninja = 5.11.72 allows attackers with admin credentials to execute arbitrary code on the server via uploaded .php files...

CVE-2025-10009: Unrestricted Upload of File with Dangerous Type

Incorrect handling of uploaded files in the admin "Restore" function in Invoice Ninja = 5.11.72 allows attackers with admin credentials to execute arbitrary code on the server via uploaded .php files...

CVE-2025-58449

Maho is a free and open source ecommerce platform. In Maho prior to 25.9.0, an authenticated staff user with access to the Dashboard and Catalog\Manage Products permissions can create a custom option on a listing with a file input field. By allowing file uploads with a .php extension, the user ca...

Linux Distros Unpatched Vulnerability : CVE-2017-17898

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dolibarr ERP/CRM version 6.0.4 does not block direct requests to .tpl.php files, which allows remote attackers to obtain sensitive information. CVE-2017-17898...

Linux Distros Unpatched Vulnerability : CVE-2018-14028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In WordPress 4.9.7, plugins uploaded via the admin area are not verified as being ZIP files. This allows for PHP files to be uploaded. Once a PHP file is...

Linux Distros Unpatched Vulnerability : CVE-2019-8937

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - HotelDruid 2.3.0 has XSS affecting the nsextt, cambia1, mesefine, origine, and anno parameters in creaprezzi.php, tabella3.php, personalizza.php, and...