EUVD-2025-6705

Malicious code in bioql PyPI...

CVE-2021-24216

The All-in-One WP Migration WordPress plugin before 7.41 does not validate uploaded files' extension, which allows administrators to upload PHP files on their site, even on multisite installations...

PT-2020-8564

Name of the Vulnerable Software and Affected Versions: OpenEMR version 5.0.1.3 Description: The issue allows Cross-Site Request Forgery CSRF via library/ajax and interface/super. This can be demonstrated by using the interface/super/manage site files.php endpoint to upload a .php file...