EUVD-2024-35409

Malicious code in bioql PyPI...

EUVD-2022-2813

Malicious code in bioql PyPI...

EUVD-2022-2340

Malicious code in bioql PyPI...

EUVD-2024-46774

Malicious code in bioql PyPI...

EUVD-2025-2789

Malicious code in bioql PyPI...

EUVD-2022-51791

Malicious code in bioql PyPI...

EUVD-2025-13816

Malicious code in bioql PyPI...

EUVD-2025-10796

Malicious code in bioql PyPI...

EUVD-2025-17481

Malicious code in bioql PyPI...

EUVD-2025-2705

Malicious code in bioql PyPI...

EUVD-2023-47573

Malicious code in bioql PyPI...

EUVD-2024-46087

Malicious code in bioql PyPI...

The zend_string_extend function in Zend/zend_string.h in PHP through 7.1.5 does not prevent changes to string objects that result in a negative length, which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact by leveraging a script's use of .= with a long string.

...

PHP 7.1.5 has an Out of bounds access in php_pcre_replace_impl via a crafted preg_replace call.

...

CVE-2025-60150

CVE-2025-60150: In Subscribe to Download (WordPress plugin), an authenticated attacker can exploit Local File Inclusion via improper control of the filename in PHP include/require, affecting versions up to 2.0.9. The vulnerability is documented with a high impact (CVSS v3.1 base score 7.5) but ex...

CVE-2025-10993 MuYuCMS Template Management admin.php code injection

A security flaw has been discovered in MuYuCMS up to 2.7. Affected by this issue is some unknown functionality of the file /admin.php of the component Template Management. The manipulation results in code injection. It is possible to launch the attack remotely...

CVE-2025-10973 JackieDYH Resume-management-system show.php sql injection

A flaw has been found in JackieDYH Resume-management-system up to fb6b857d852dd796e748ce30c606fe5e61c18273. Affected by this issue is some unknown functionality of the file /admin/show.php. This manipulation of the argument userid causes sql injection. The attack may be initiated remotely. The...

CVE-2025-10946

A vulnerability was detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. The affected element is an unknown function of the file dy.php. Performing manipulation of the argument hm results in cross site scripting. Remote exploitation of the attack is possible. This product...

CVE-2025-10842

A vulnerability was detected in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /administrator/wew.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used...

CVE-2025-58973 WordPress Easy Elementor Addons Plugin <= 2.2.8 - Local File Inclusion Vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in hashthemes Easy Elementor Addons easy-elementor-addons allows PHP Local File Inclusion.This issue affects Easy Elementor Addons: from n/a through = 2.2.8...