EUVD-2023-0698

Malicious code in bioql PyPI...

EUVD-2024-52475

Malicious code in bioql PyPI...

EUVD-2025-13778

Malicious code in bioql PyPI...

EUVD-2015-5685

Malicious code in bioql PyPI...

EUVD-2023-44178

Malicious code in bioql PyPI...

EUVD-2024-35450

Malicious code in bioql PyPI...

EUVD-2025-6104

Malicious code in bioql PyPI...

EUVD-2023-23946

Malicious code in bioql PyPI...

EUVD-2024-47713

Malicious code in bioql PyPI...

EUVD-2023-55588

Malicious code in bioql PyPI...

EUVD-2024-36891

Malicious code in bioql PyPI...

EUVD-2022-7607

Malicious code in bioql PyPI...

EUVD-2024-43408

Malicious code in bioql PyPI...

EUVD-2025-3425

Malicious code in bioql PyPI...

EUVD-2023-48450

Malicious code in bioql PyPI...

AZL-68285 CVE-2025-46818 affecting package redis for versions less than 6.2.20-1

Redis is an open source, in-memory database that persists on disk. Versions 8.2.1 and below allow an authenticated user to use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all versions o...

SourceCodester Pet Grooming Management Software 跨站脚本漏洞

SourceCodester Pet Grooming Management Software is an open source pet grooming management system from SourceCodester. A cross-site scripting vulnerability exists in SourceCodester Pet Grooming Management Software version 1.0, which stems from unverified input in the customer name field of the...

CVE-2025-59936 get-jwks poisoned JWKS cache allows post-fetch issuer validation bypass

get-jwks contains fetch utils for JWKS keys. In versions prior to 11.0.2, a vulnerability in get-jwks can lead to cache poisoning in the JWKS key-fetching mechanism. When the iss issuer claim is validated only after keys are retrieved from the cache, it is possible for cached keys from an...

CVE-2025-10828

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly an...

PT-2025-38706

Name of the Vulnerable Software and Affected Versions code-projects E-Commerce Website version 1.0 Description A flaw exists in code-projects E-Commerce Website 1.0 where manipulation of the user id argument in the file '/pages/admin account delete.php' can lead to SQL injection. This issue is...