EUVD-2025-19640

Malicious code in bioql PyPI...

EUVD-2025-19644

Malicious code in bioql PyPI...

EUVD-2025-19642

Malicious code in bioql PyPI...

EUVD-2025-19647

Malicious code in bioql PyPI...

EUVD-2025-19631

Malicious code in bioql PyPI...

EUVD-2025-19645

Malicious code in bioql PyPI...

EUVD-2025-19641

Malicious code in bioql PyPI...

EUVD-2024-31208

Malicious code in bioql PyPI...

EUVD-2025-19646

Malicious code in bioql PyPI...

The vulnerability of the Search.cgi?action=cgi_query component of the Avtech digital video recorder software allows a hacker to execute arbitrary code.

The vulnerability of the Search.cgi?action=cgiquery component of the Avtech digital video recorder software lies in insufficient validation of input data when processing parameters such as username or queryb64str. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

The vulnerability of the PwdGrp.cgi component of Avtech’s microprogrammed IP cameras and digital/network video recorders allows a intruder to execute arbitrary code.

The vulnerability of the PwdGrp.cgi component of Avtech’s microprogrammed IP cameras and digital/netscreen video recorders lies in insufficient validation of input data during the processing of the pwd or grp parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the DoShellCmd() function in the ActionD daemon of the Avtech microprogramming system for IP cameras and digital/network video recorders allows a violator to execute arbitrary code.

The vulnerability of the DoShellCmd function in the ActionD daemon of Avtech’s microprogramming software for IP cameras and digital/netscreen video recorders lies in insufficient validation of input data during the processing of the strCmd parameter. Exploiting this vulnerability allows a remote...

The vulnerability of the Machine.cgi?action=get_capability component of the Avtech microprogrammed software for IP cameras and digital/network video recorders allows a intruder to gain unauthorized access to confidential information.

The vulnerability of the Machine.cgi?action=getcapability component of Avtech’s microprogrammed IP cameras and digital/netscreen video recorders lies in the lack of authentication for critical functions. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

CVE-2025-50944

An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0. The custom X509TrustManager used in checkServerTrusted only checks the certificate's expiration date, skipping proper TLS chain validation...

CVE-2025-46408

An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.PushHttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0. The methods set ALLOWALLHOSTNAMEVERIFIER, bypassing domain validation...

CVE-2025-46408

An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.PushHttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0. The methods set ALLOWALLHOSTNAMEVERIFIER, bypassing domain validation...

CVE-2025-50110

An issue was discovered in the method push.lite.avtech.com.AvtechLib.GetHttpsResponse in AVTECH EagleEyes Lite 2.0.0, the GetHttpsResponse method transmits sensitive information - including internal server URLs, account IDs, passwords, and device tokens - as plaintext query parameters over HTTPS...

CVE-2025-46408

An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.PushHttpService.getNewHttpClient in AVTECH EagleEyes 2.0.0. The methods set ALLOWALLHOSTNAMEVERIFIER, bypassing domain validation...

CVE-2025-50944

An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0. The custom X509TrustManager used in checkServerTrusted only checks the certificate's expiration date, skipping proper TLS chain validation...

CVE-2025-50944

An issue was discovered in the method push.lite.avtech.com.MySSLSocketFactoryNew.checkServerTrusted in AVTECH EagleEyes 2.0.0. The custom X509TrustManager used in checkServerTrusted only checks the certificate's expiration date, skipping proper TLS chain validation...