EUVD-2025-28062

Malicious code in bioql PyPI...

EUVD-2025-28765

Malicious code in bioql PyPI...

EUVD-2025-28127

Malicious code in bioql PyPI...

EUVD-2025-24025

Malicious code in bioql PyPI...

EUVD-2025-28124

Malicious code in bioql PyPI...

EUVD-2025-30774

Malicious code in bioql PyPI...

EUVD-2025-25332

Malicious code in bioql PyPI...

EUVD-2025-28047

Malicious code in bioql PyPI...

EUVD-2025-24060

Malicious code in bioql PyPI...

EUVD-2025-25730

Malicious code in bioql PyPI...

EUVD-2025-27812

Malicious code in bioql PyPI...

EUVD-2025-24012

Malicious code in bioql PyPI...

EUVD-2025-24921

Malicious code in bioql PyPI...

EUVD-2025-24891

Malicious code in bioql PyPI...

EUVD-2025-29127

Malicious code in bioql PyPI...

CVE-2024-56804 Video Station

An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.4 and later...

CVE-2025-9199

The Woo superb slideshow transition gallery with random effect plugin for WordPress is vulnerable to SQL Injection via the 'woo-superb-slideshow' shortcode in all versions up to, and including, 9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on t...

CVE-2025-40636

SQL injection vulnerability in Joomla module modvvisitcounter v2.0.4j3. This vulnerability allows an attacker to retrieve database content via the ‘cipvvisitcounter’ cookie at all endpoints where the plugin counts visits...

CVE-2025-9200 Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Unauthenticated SQL Injection

The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nhynaacomments function in all versions up to, and including, 0.8.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2025-9200 Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App <= 0.8.8.8 - Unauthenticated SQL Injection

The Blappsta Mobile App Plugin – Your native, mobile iPhone App and Android App plugin for WordPress is vulnerable to SQL Injection via the nhynaacomments function in all versions up to, and including, 0.8.8.8 due to insufficient escaping on the user supplied parameter and lack of sufficient...