EUVD-2024-36654

Malicious code in bioql PyPI...

EUVD-2024-44942

Malicious code in bioql PyPI...

EUVD-2024-52341

Malicious code in bioql PyPI...

EUVD-2025-22515

Malicious code in bioql PyPI...

EUVD-2025-24264

Malicious code in bioql PyPI...

EUVD-2024-45869

Malicious code in bioql PyPI...

EUVD-2024-45893

Malicious code in bioql PyPI...

EUVD-2024-43534

Malicious code in bioql PyPI...

EUVD-2025-23552

Malicious code in bioql PyPI...

EUVD-2023-29716

Malicious code in bioql PyPI...

EUVD-2025-10607

Malicious code in bioql PyPI...

EUVD-2025-31249

Malicious code in bioql PyPI...

EUVD-2025-21623

Malicious code in bioql PyPI...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...

CVE-2025-56162: Improper Neutralization of Special Elements used in an SQL Command

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...

PT-2025-40400

Name of the Vulnerable Software and Affected Versions YOSHOP version 2.0 Description The software is susceptible to an unauthenticated SQL injection through the goodsIds parameter of the /api/goods/listByIds API endpoint. The getListByIds function improperly concatenates user-supplied input into ...

VulnCheck KEV: CVE-2024-56064

Unrestricted Upload of File with Dangerous Type vulnerability in azzaroco WP SuperBackup indeed-wp-superbackup allows Upload a Web Shell to a Web Server.This issue affects WP SuperBackup: from n/a through = 2.3.3...

WordPress Plugin AR For WordPress Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress plugin AR For WordPress, whi...