EUVD-2022-0479

Malicious code in bioql PyPI...

EUVD-2023-34934

Malicious code in bioql PyPI...

EUVD-2025-16547

Malicious code in bioql PyPI...

EUVD-2025-10492

Malicious code in bioql PyPI...

EUVD-2022-40947

Malicious code in bioql PyPI...

EUVD-2022-6844

Malicious code in bioql PyPI...

EUVD-2024-3380

Malicious code in bioql PyPI...

EUVD-2022-44050

Malicious code in bioql PyPI...

EUVD-2022-25877

Malicious code in bioql PyPI...

EUVD-2024-53582

Malicious code in bioql PyPI...

EUVD-2021-6862

Malicious code in bioql PyPI...

EUVD-2025-3738

Malicious code in bioql PyPI...

EUVD-2024-49336

Malicious code in bioql PyPI...

AndSoft e-TMS 跨站脚本漏洞

AndSoft e-TMS is a logistics management software from AndSoft Spain. AndSoft e-TMS suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameters l, demo, demo2, TNTLOGIN, UO, and SuppConn in the file...

PT-2025-40655

CVE-2025-61854 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-61854 Published : Oct. 2, 2025, 3:15 a.m. | 1 hour, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE-2025-8121

Improper neutralization of input provided by an authorized user in article positioning functionality allows for Blind SQL Injection attacks. This issue affects all 3 templates: www, bip and ww+bip. This product is End-Of-Life and producent will not publish patches for this vulnerability...

PT-2025-39958

Name of the Vulnerable Software and Affected Versions check-branches affected versions not specified Description The software is susceptible to a command injection issue. The tool trusts branch names without sanitization and constructs git commands by concatenating user input. This allows attacke...

CVE-2025-3193

The CVE-2025-3193 entry concerns algoliasearch-helper versions 2.0.0-rc1 through 3.11.2 (and earlier) with a Prototype Pollution in the _merge() function of merge.js. The underlying issue allows modification of constructor.prototype and, in an extreme edge-case where the resulting error is caught...

CVE-2025-3193

Versions of the package algoliasearch-helper from 2.0.0-rc1 and before 3.11.2 are vulnerable to Prototype Pollution in the merge function in merge.js, which allows constructor.prototype to be written even though doing so throws an error. In the "extreme edge-case" that the resulting error is...

CVE-2025-57347

A vulnerability exists in the 'dagre-d3-es' Node.js package version 7.0.9, specifically within the 'bk' module's addConflict function, which fails to properly sanitize user-supplied input during property assignment operations. This flaw allows attackers to exploit prototype pollution...