EUVD-2025-18763

Malicious code in bioql PyPI...

CVE-2025-44203

In HotelDruid 3.0.0 and 3.0.7, the unauthenticated database-setup endpoint creadb.php can be reached before setup is completed and performs database creation without locking. By sending many concurrent requests, an attacker can trigger a race condition during which verbose SQL error messages...

CVE-2025-44203

In HotelDruid 3.0.0 and 3.0.7, the unauthenticated database-setup endpoint creadb.php can be reached before setup is completed and performs database creation without locking. By sending many concurrent requests, an attacker can trigger a race condition during which verbose SQL error messages...

PT-2025-26429

Name of the Vulnerable Software and Affected Versions: HotelDruid version 3.0.7 Description: The issue allows an unauthenticated attacker to exploit verbose SQL error messages on the "creadb.php" endpoint before the 'create database' button is pressed. By sending malformed POST requests to this...

CVE-2025-44203

HotelDruid versions 3.0.0 and 3.0.7 are vulnerable to a race condition on the unauthenticated creadb.php endpoint during database setup. Because the routine performs database creation without locking, an attacker sending concurrent POST requests can trigger verbose SQL error messages that disclos...