EUVD-2013-6105

Malware in sbrugna...

EUVD-2020-7774

Malware in sbrugna...

EUVD-2025-16688

Malicious code in bioql PyPI...

EUVD-2025-12191

Malicious code in bioql PyPI...

EUVD-2023-59125

Malicious code in bioql PyPI...

EUVD-2022-44593

Malicious code in bioql PyPI...

EUVD-2023-33458

Malicious code in bioql PyPI...

EUVD-2022-41160

Malicious code in bioql PyPI...

EUVD-2025-12192

Malicious code in bioql PyPI...

EUVD-2022-44592

Malicious code in bioql PyPI...

EUVD-2022-44595

Malicious code in bioql PyPI...

EUVD-2022-44594

Malicious code in bioql PyPI...

EUVD-2022-29291

Malicious code in bioql PyPI...

EUVD-2021-32258

Malicious code in bioql PyPI...

EUVD-2023-36105

Malicious code in bioql PyPI...

EUVD-2025-12196

Malicious code in bioql PyPI...

Viessmann Vitogate 300 BN/MB vitogate.cgi form-0-2 Command Injection Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Viessmann Vitogate 300 BN/MB devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of JSON payload data provided to the vitogate.cg...

CVE-2025-9494

An OS command injection vulnerability has been discovered in the Vitogate 300, which can be exploited by malicious users to compromise affected installations. Specifically, the /cgi-bin/vitogate.cgi endpoint is affected, when the form JSON parameter is set to form-0-2. The vulnerability stems fro...

Viessmann Vitogate 300

RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to modify an intended OS command when it is sent to a downstream component, or allow an attacker to cause unexpected interactions between the client and server. 2. RECOMMENDED PRACTICES CISA recommends users...

CVE-2025-9494

An OS command injection vulnerability has been discovered in the Vitogate 300, which can be exploited by malicious users to compromise affected installations. Specifically, the /cgi-bin/vitogate.cgi endpoint is affected, when the form JSON parameter is set to form-0-2. The vulnerability stems fro...