350 matches found
EUVD-2022-28249
Malicious code in bioql PyPI...
EUVD-2022-33508
Malicious code in bioql PyPI...
EUVD-2022-50394
Malicious code in bioql PyPI...
EUVD-2023-56778
Malicious code in bioql PyPI...
EUVD-2022-51000
Malicious code in bioql PyPI...
EUVD-2022-37386
Malicious code in bioql PyPI...
EUVD-2022-36338
Malicious code in bioql PyPI...
CVE-2025-55834
A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive information via the logController.do component...
JeeWMS Cross-Site Scripting Vulnerability
JeeWMS is a JAVA-based warehouse management system . A cross-site scripting vulnerability exists in JeeWMS 3.7 and earlier versions, which stems from the lack of effective filtering and escaping of user-supplied data by the logController.do component, and can be exploited by an attacker to disclo...
CVE-2025-55834
A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive information via the logController.do component...
Malicious code in wms-capabilities-parser (npm)
The package wms-capabilities-parser was found to contain malicious code...
Malicious code in wms-mobile-styles (npm)
The package wms-mobile-styles was found to contain malicious code...
Malicious code in wms-web-ui (npm)
The package wms-web-ui was found to contain malicious code...
MAL-2025-39385 Malicious code in wms-mobile-styles (npm)
The package wms-mobile-styles was found to contain malicious code...
CVE-2025-8126
A vulnerability classified as critical has been found in deerwms deer-wms-2 up to 3.3. This affects an unknown part of the file /system/user/export. The manipulation of the argument paramsdataScope leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-8163
A vulnerability, which was classified as critical, was found in deerwms deer-wms-2 up to 3.3. This affects an unknown part of the file /system/role/list. The manipulation of the argument paramsdataScope leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-8163 deerwms deer-wms-2 list sql injection
A vulnerability, which was classified as critical, was found in deerwms deer-wms-2 up to 3.3. This affects an unknown part of the file /system/role/list. The manipulation of the argument paramsdataScope leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-8162
A vulnerability, which was classified as critical, has been found in deerwms deer-wms-2 up to 3.3. Affected by this issue is some unknown functionality of the file /system/dept/list. The manipulation of the argument paramsdataScope leads to sql injection. The attack may be launched remotely. The...
CVE-2025-8162 deerwms deer-wms-2 list sql injection
A vulnerability, which was classified as critical, has been found in deerwms deer-wms-2 up to 3.3. Affected by this issue is some unknown functionality of the file /system/dept/list. The manipulation of the argument paramsdataScope leads to sql injection. The attack may be launched remotely. The...
CVE-2025-8161
Affects deerwms deer-wms-2 up to version 3.3. The vulnerability is an SQL injection in the /system/role/export function, triggered by manipulating the params[dataScope] argument. Exploitation is possible remotely and has been publicly disclosed. Affected versions are listed as up to 3.3 (vulnerab...