EUVD-2017-3079

Malware in sbrugna...

EUVD-2018-12111

Malware in sbrugna...

EUVD-2017-10168

Malware in sbrugna...

EUVD-2016-4710

Malware in sbrugna...

EUVD-2021-17061

Malware in sbrugna...

EUVD-2022-5778

Malicious code in bioql PyPI...

EUVD-2022-49309

Malicious code in bioql PyPI...

EUVD-2024-53507

Malicious code in bioql PyPI...

EUVD-2024-1365

Malicious code in bioql PyPI...

EUVD-2023-54194

Malicious code in bioql PyPI...

CVE-2025-59743

SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'SessionID' cookie in '/inc/connect/CONNECTION.ASP'...

CVE-2025-59743 Multiple vulnerabilities in AndSoft's e-TMS

SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'SessionID' cookie in '/inc/connect/CONNECTION.ASP'...

CVE-2025-59743: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability could allow an attacker to retrieve, create, update, and delete databases by sending a POST request. The relationship between parameter and assigned identifier is a 'SessionID' cookie in '/inc/connect/CONNECTION.ASP'...

Linux Distros Unpatched Vulnerability : CVE-2018-25052

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in Catalyst-Plugin-Session up to 0.40 and classified as problematic. This vulnerability affects the function loadsessionid of the...

CVE-2024-36697

A cross-site scripting XSS vulnerability in the Admin Login page of Allworx System Software v9.1.9.12 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the SessionID parameter at query.asp...

CVE-2024-36697

A cross-site scripting XSS vulnerability in the Admin Login page of Allworx System Software v9.1.9.12 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the SessionID parameter at query.asp...

CVE-2024-36697: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Admin Login page of Allworx System Software v9.1.9.12 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the SessionID parameter at query.asp...

CVE-2024-36697

A cross-site scripting XSS vulnerability in the Admin Login page of Allworx System Software v9.1.9.12 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the SessionID parameter at query.asp...

CVE-2024-36697

A cross-site scripting (XSS) vulnerability exists in the Admin Login page of Allworx System Software v9.1.9.12 . The flaw is caused by the improper handling of the SessionID parameter at the query.asp API endpoint, which allows an attacker to inject a crafted payload to execute arbitrary web scri...

PT-2025-28302 · Unknown · Phpgurukul Online Notes Sharing System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Notes Sharing System version 1.0 Description: A critical issue was found in the PHPGurukul Online Notes Sharing System, affecting an unknown part of the file /Dashboard of the component Cookie Handler. The manipulation of th...