EUVD-2024-54424

Malicious code in bioql PyPI...

CVE-2024-40074

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/SystemSettings.php?f=updatesettings, and the point of vulnerability is in the POST parameter 'shortname'...

CVE-2024-40070

Sourcecodester Online ID Generator System 1.0 was discovered to contain an arbitrary file upload vulnerability via idgenerator/classes/Users.php?f=save. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2024-40068

The Sourcecodester Online ID Generator System 1.0 is vulnerable to a SQL injection vulnerability. The flaw exists due to the incorrect manipulation of the id parameter at the id_generator/admin/?page=templates/manage_template&id=1 endpoint. This vulnerability allows for unauthorized database inte...