EUVD-2025-27595

Malicious code in bioql PyPI...

EUVD-2022-1412

Malicious code in bioql PyPI...

EUVD-2022-52273

Malicious code in bioql PyPI...

EUVD-2023-28526

Malicious code in bioql PyPI...

EUVD-2022-39039

Malicious code in bioql PyPI...

EUVD-2024-52492

Malicious code in bioql PyPI...

EUVD-2025-26506

Malicious code in bioql PyPI...

EUVD-2025-24701

Malicious code in bioql PyPI...

EUVD-2022-15860

Malicious code in bioql PyPI...

EUVD-2024-40308

Malicious code in bioql PyPI...

EUVD-2025-17243

Malicious code in bioql PyPI...

EUVD-2021-30066

Malicious code in bioql PyPI...

EUVD-2025-31637

Malicious code in bioql PyPI...

EUVD-2025-25499

Malicious code in bioql PyPI...

EUVD-2022-41848

Malicious code in bioql PyPI...

Exploit for CVE-2025-8625

CVE-2025-8625 Copypress Rest API 1.1 - 1.2 - Missing Configura...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...

Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands

...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...