EUVD-2024-34543

Malicious code in bioql PyPI...

EUVD-2025-18301

Malicious code in bioql PyPI...

EUVD-2024-54494

Malicious code in bioql PyPI...

EUVD-2024-42721

Malicious code in bioql PyPI...

EUVD-2022-29542

Malicious code in bioql PyPI...

EUVD-2022-41828

Malicious code in bioql PyPI...

EUVD-2025-29072

Malicious code in bioql PyPI...

EUVD-2022-50269

Malicious code in bioql PyPI...

EUVD-2025-25020

Malicious code in bioql PyPI...

EUVD-2022-41827

Malicious code in bioql PyPI...

EUVD-2022-4909

Malicious code in bioql PyPI...

EUVD-2022-2821

Malicious code in bioql PyPI...

EUVD-2023-1909

Malicious code in bioql PyPI...

EUVD-2025-10403

Malicious code in bioql PyPI...

EUVD-2022-31386

Malicious code in bioql PyPI...

EUVD-2022-27686

Malicious code in bioql PyPI...

EUVD-2025-28273

Malicious code in bioql PyPI...

EUVD-2022-53419

Malicious code in bioql PyPI...

The vulnerabilities of the QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() methods in the Django web application framework allow attackers to influence the privacy and integrity of the protected information.

The vulnerability of the QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra methods in the Django web application framework is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to influence the confidentialit...

PT-2025-40244

Name of the Vulnerable Software and Affected Versions Frappe ERPNext version 15.57.5 Description The function get blanket orders at erpnext/controllers/queries.py is susceptible to SQL Injection. An attacker can potentially extract information from databases by injecting a SQL query into the...