1488 matches found
EUVD-2024-50261
Malicious code in bioql PyPI...
EUVD-2022-4512
Malicious code in bioql PyPI...
EUVD-2022-35112
Malicious code in bioql PyPI...
EUVD-2021-8630
Malicious code in bioql PyPI...
EUVD-2022-4996
Malicious code in bioql PyPI...
EUVD-2024-53503
Malicious code in bioql PyPI...
EUVD-2023-2488
Malicious code in bioql PyPI...
EUVD-2023-28022
Malicious code in bioql PyPI...
EUVD-2022-1591
Malicious code in bioql PyPI...
EUVD-2025-3065
Malicious code in bioql PyPI...
EUVD-2023-2611
Malicious code in bioql PyPI...
MyClub security vulnerabilities
MyClub is a club management software for jibux individual developers. A security vulnerability exists in MyClub version 0.5, which stems from insufficient cleanup of query parameter inputs and could lead to an SQL injection attack...
Cisco IOS XE Command Injection
The vulnerability of the command-line interface in Cisco IOS XE operating systems is related to incorrect validation of query parameters. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
Perplexity AI Web Application security vulnerabilities
Perplexity AI Web Application is a big data search engine application utilizing a big language model from Perplexity, Inc. in the United States. A security vulnerability exists in Perplexity AI Web Application that stems from a GET parameter that could lead to the disclosure of sensitive...
CVE-2025-59155 hackmd-mcp server-side request forgery in HTTP transport mode
hackmd-mcp is a Model Context Protocol server for integrating HackMD's note-taking platform with AI assistants. From 1.4.0 to before 1.5.0, hackmd-mcp contains a server-side request forgery SSRF vulnerability when the server is run in HTTP transport mode. Arbitrary hackmdApiUrl values supplied vi...
CVE-2025-52048
In Frappe 15.x.x before 15.72.0 and 14.x.x before 14.96.10, in the function addtag at frappe/desk/doctype/tag/tag.py is vulnerable to SQL Injection, which allows an attacker to extract information from databases by injecting a SQL query into the dt parameter...
VulnCheck KEV: CVE-2023-24733
PMB v7.4.6 was discovered to contain a reflected cross-site scripting XSS vulnerability via the query parameter at /admin/convert/exportz3950new.php...
CVE-2025-10330
A flaw has been found in cdevroe unmark up to 1.9.3. This vulnerability affects unknown code of the file application/views/layouts/topbar/searchform.php. This manipulation of the argument q causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been published...
CVE-2025-40725
CVE-2025-40725: Reflected XSS in Azon Dominator allows an attacker to inject JavaScript via the q parameter in /search (GET). Impact could include stealing session cookies or performing actions on behalf of the user. Mitigation documented in PT-2025-37012: sanitize/encode the q parameter in the /...
