EUVD-2022-31604

Malicious code in bioql PyPI...

EUVD-2021-34682

Malicious code in bioql PyPI...

EUVD-2022-31860

Malicious code in bioql PyPI...

EUVD-2023-52747

Malicious code in bioql PyPI...

EUVD-2025-22449

Malicious code in bioql PyPI...

EUVD-2022-35493

Malicious code in bioql PyPI...

EUVD-2025-28858

Malicious code in bioql PyPI...

EUVD-2022-30164

Malicious code in bioql PyPI...

EUVD-2022-44191

Malicious code in bioql PyPI...

EUVD-2022-47299

Malicious code in bioql PyPI...

EUVD-2024-34236

Malicious code in bioql PyPI...

EUVD-2022-32884

Malicious code in bioql PyPI...

EUVD-2022-47327

Malicious code in bioql PyPI...

EUVD-2025-6731

Malicious code in bioql PyPI...

EUVD-2022-29139

Malicious code in bioql PyPI...

EUVD-2022-40913

Malicious code in bioql PyPI...

CVE-2025-11138 mirweiye wenkucms common.php createPathOne os command injection

A vulnerability was found in mirweiye wenkucms up to 3.4. This impacts the function createPathOne of the file app/common/common.php. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used...

CVE-2025-11089

A vulnerability was determined in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This impacts an unknown function of the file /Profilers/PriProfile/COUNT3s4.php. Executing manipulation of the argument cbranch can lead to sql injection. It is possible to launch the...

CVE-2025-10945

A security vulnerability has been detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. Impacted is an unknown function of the file d.php. Such manipulation of the argument hm leads to cross site scripting. The attack may be launched remotely. This product operates on a rolli...

smsboom 代码注入漏洞

smsboom is an SMS bombing software by the individual developer of QuitDropdatabaseFalse. A code injection vulnerability exists in smsboom 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674 and prior versions, which stems from a misuse of the parameter hm in the file dy.php, and could lead to a cross-site...