EUVD-2023-23562

Malicious code in bioql PyPI...

EUVD-2023-34268

Malicious code in bioql PyPI...

EUVD-2022-24824

Malicious code in bioql PyPI...

EUVD-2022-52129

Malicious code in bioql PyPI...

EUVD-2023-34871

Malicious code in bioql PyPI...

EUVD-2024-54419

Malicious code in bioql PyPI...

EUVD-2023-34267

Malicious code in bioql PyPI...

EUVD-2023-57364

Malicious code in bioql PyPI...

EUVD-2023-12362

Malicious code in bioql PyPI...

EUVD-2023-23327

Malicious code in bioql PyPI...

EUVD-2023-34107

Malicious code in bioql PyPI...

EUVD-2025-29724

Malicious code in bioql PyPI...

EUVD-2023-23729

Malicious code in bioql PyPI...

EUVD-2025-29547

Malicious code in bioql PyPI...

CVE-2025-59739

Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in...

CVE-2025-40989

Stored Cross Site Scripting vulnerability in Ekushey CRM v5.0 by Creativeitem, due to lack of proper validation of user inputs via the "/ekushey/index.php/client/projectmessage/add/xxx", affecting to "message" parameter via POST. This vulnerability could allow a remote attacker to send a speciall...

CVE-2025-11038 itsourcecode Online Clinic Management System details.php sql injection

A weakness has been identified in itsourcecode Online Clinic Management System 1.0. Affected is an unknown function of the file /details.php?action=post. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available t...

PT-2025-38745

Name of the Vulnerable Software and Affected Versions CubeCart versions prior to 6.5.11 Description A flaw exists in the newsletter subscription functionality that permits unauthorized user unsubscription. An attacker can manipulate the force unsubscribe parameter in a POST request to the...

CVE-2025-40678 Unrestricted upload vulnerability for dangerous file types on Summar Software´s Portal del Empleado

Unrestricted upload vulnerability for dangerous file types on Summar Software´s Portal del Empleado. This vulnerability allows an attacker to upload a dangerous file type by sending a POST request using the parameter “cctl00$ContentPlaceHolder1$fuAdjunto” in “/MemberPages/ntfabsentismo.aspx”...

CVE-2025-10592 itsourcecode Online Public Access Catalog OPAC POST Parameter mysearch.php sql injection

A security vulnerability has been detected in itsourcecode Online Public Access Catalog OPAC 1.0. This impacts an unknown function of the file mysearch.php of the component POST Parameter Handler. Such manipulation of the argument searchfield/searchtext leads to sql injection. The attack may be...