11354 matches found
Dell PowerProtect Data Domain 操作系统命令注入漏洞
Dell PowerProtect Data Domain Dell PowerProtect DD is a suite of hardware appliances for data protection, backup, storage, and deduplication from Dell, USA. An operating system command injection vulnerability exists in Dell PowerProtect Data Domain, which stems from improper neutralization of...
Planet WGR-500 安全漏洞
The Planet WGR-500 is a WiFi router from Planet in Taiwan, China. A security vulnerability exists in Planet WGR-500 v1.3411b190912, which stems from improper manipulation of the newdevicename request parameter, which could lead to arbitrary command execution...
Ankitects Anki 安全漏洞
Ankitects Anki is an open source program by the individual developers of Ankitects to help memorize information through the use of flash cards. A security vulnerability exists in Ankitects Anki versions prior to 25.02.5, which stems from improper handling of the URL scheme and could lead to the...
CVE-2025-36565: Improper Neutralization of Argument Delimiters in a Command
Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.1.0.10, LTS2024 release Versions 7.13.1.0 through 7.13.1.25, LTS 2023 release versions 7.10.1.0 through 7.10.1.50, contain an Improper Neutralization of Argument Delimiters in a...
PT-2025-41188
Name of the Vulnerable Software and Affected Versions Anki versions prior to 25.02.5 Description A specially crafted shared deck on Windows can lead to the execution of arbitrary commands when playing audio due to improper handling of URL schemes. Recommendations Update to version 25.02.5 or late...
EUVD-2025-32574
IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow an unauthenticated user to execute arbitrary commands with lower user privileges on the system due to improper validation of user supplied input...
D-Link DIR-823X Router Sub_412E7C Function Arbitrary Command Execution
The vulnerability of the sub412E7C function in the /goform/setswitchsettings function of the D-Link DIR-823X router’s microprogramming software is related to the lack of measures taken to protect data at the control level. Exploiting this vulnerability could allow an attacker to execute arbitrary...
D-Link DIR-823X Router Arbitrary Command Execution
The vulnerability of the /goform/deleteofflinedevice function in the microprogramming software for D-Link DIR-823X routers is related to the lack of measures taken at the control level when processing the delvalue parameter. Exploiting this vulnerability allows an attacker to execute arbitrary...
D-Link DIR-823X Router Arbitrary Command Execution
The vulnerability of the /goform/setdevicename function in D-Link DIR-823X router microprogramming software is related to the lack of data cleaning measures at the control level when processing the mac parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands by...
D-Link DIR-852 Router Command Execution
The vulnerability of the web interface for controlling the D-Link DIR-852 router’s microprogramming system, located at /htdocs/cgibin/hedwig.cgi, is related to the lack of data cleaning measures at the control level. Exploiting this vulnerability allows an attacker to send arbitrary commands by...
CVE-2025-8406: Improper Limitation of a Pathname to a Restricted Directory
ZenML version 0.83.1 is affected by a path traversal vulnerability in the PathMaterializer class. The load function uses ispathwithindirectory to validate files during data.tar.gz extraction, which fails to effectively detect symbolic and hard links. This vulnerability can lead to arbitrary file...
EUVD-2025-10419
Malicious code in bioql PyPI...
EUVD-2024-35275
Malicious code in bioql PyPI...
EUVD-2025-13241
Malicious code in bioql PyPI...
EUVD-2023-50111
Malicious code in bioql PyPI...
EUVD-2024-18004
Malicious code in bioql PyPI...
EUVD-2024-17606
Malicious code in bioql PyPI...
EUVD-2022-44265
Malicious code in bioql PyPI...