EUVD-2022-31881

Malicious code in bioql PyPI...

EUVD-2022-31882

Malicious code in bioql PyPI...

EUVD-2022-31890

Malicious code in bioql PyPI...

EUVD-2022-31884

Malicious code in bioql PyPI...

EUVD-2024-53675

Malicious code in bioql PyPI...

EUVD-2024-53658

Malicious code in bioql PyPI...

EUVD-2024-53690

Malicious code in bioql PyPI...

EUVD-2024-53671

Malicious code in bioql PyPI...

EUVD-2024-53673

Malicious code in bioql PyPI...

EUVD-2022-6465

Malicious code in bioql PyPI...

EUVD-2024-53654

Malicious code in bioql PyPI...

EUVD-2025-31395

Malicious code in bioql PyPI...

EUVD-2024-53651

Malicious code in bioql PyPI...

EUVD-2025-28242

Malicious code in bioql PyPI...

EUVD-2022-31883

Malicious code in bioql PyPI...

CVE-2025-59939

WeGIA is a Web manager for charitable institutions. Prior to version 3.5.0, WeGIA is vulnerable to SQL Injection attacks in the control.php endpoint with the following parameters: nomeClasse=ProdutoControle&metodo=excluir&idproduto=malicious command. It is necessary to apply prepared statements...

PT-2025-39699

Name of the Vulnerable Software and Affected Versions WeGIA versions prior to 3.5.0 Description WeGIA, a Web manager for charitable institutions, contains a SQL Injection flaw. The issue affects the control.php endpoint, specifically through the id produto parameter. Exploitation can occur via...

Code-Projects Human Resource Integrated System 安全漏洞

Human Resource Integrated System is a human resource management system. Human Resource Integrated System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter ID in file /loginquery12.php. An attacker can exploit...

CVE-2025-53227

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in unfoldwp Magazine Saga magazine-saga allows PHP Local File Inclusion.This issue affects Magazine Saga: from n/a through = 1.2.7...

CVE-2025-9172 Vibes <= 2.2.0 - Unauthenticated SQL Injection via `resource` Parameter

The Vibes plugin for WordPress is vulnerable to time-based SQL Injection via the ‘resource’ parameter in all versions up to, and including, 2.2.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...