384 matches found
EUVD-2024-36592
Malicious code in bioql PyPI...
EUVD-2023-39197
Malicious code in bioql PyPI...
EUVD-2022-2289
Malicious code in bioql PyPI...
EUVD-2024-36590
Malicious code in bioql PyPI...
EUVD-2024-38365
Malicious code in bioql PyPI...
EUVD-2024-38359
Malicious code in bioql PyPI...
EUVD-2024-38362
Malicious code in bioql PyPI...
EUVD-2021-9056
Malicious code in bioql PyPI...
EUVD-2024-36363
Malicious code in bioql PyPI...
EUVD-2024-38395
Malicious code in bioql PyPI...
EUVD-2023-43092
Malicious code in bioql PyPI...
EUVD-2023-47096
Malicious code in bioql PyPI...
EUVD-2021-27492
Malicious code in bioql PyPI...
CVE-2023-42664
A post authentication command injection vulnerability exists when setting up the PPTP global configuration of Tp-Link ER7206 Omada Gigabit VPN Router 1.3.0 build 20230322 Rel.70591. A specially crafted HTTP request can lead to arbitrary command injection. An attacker can make an authenticated HTT...
CVE-2023-34356
An OS command injection vulnerability exists in the data.cgi xferdns functionality of peplink Surf SOHO HW1 v6.3.5 in QEMU. A specially crafted HTTP request can lead to command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...
CVE-2021-21883
An OS command injection vulnerability exists in the Web Manager Diagnostics: Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4. A specially-crafted HTTP request can lead to arbitrary command execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...
CVE-2021-21889
A stack-based buffer overflow vulnerability exists in the Web Manager Ping functionality of Lantronix PremierWave 2050 8.9.0.0R4 in QEMU. A specially crafted HTTP request can lead to remote code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability...
CVE-2021-21916
An exploitable SQL injection vulnerability exist in the ‘grouplist’ page of the Advantech R-SeeNet 2.4.15 30.07.2021. A specially-crafted HTTP request at 'descriptionfilter’ parameter. An attacker can make authenticated HTTP requests to trigger this vulnerability. This can be done as any...
CVE-2020-27231
A number of exploitable SQL injection vulnerabilities exists in ‘patientslist.do’ page of OpenClinic GA 5.173.3 application. The findDistrict parameter in ‘‘patientslist.do’ page is vulnerable to authenticated SQL injection. An attacker can make an authenticated HTTP request to trigger this...
CVE-2020-9301
Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The vulnerability exists within the handling of SpEL expressions that allows an attacker to read and write arbitrary files within the orca container...