EUVD-2023-42638

Malicious code in bioql PyPI...

EUVD-2023-42637

Malicious code in bioql PyPI...

EUVD-2022-50457

Malicious code in bioql PyPI...

EUVD-2022-50458

Malicious code in bioql PyPI...

EUVD-2025-26146

Malicious code in bioql PyPI...

EUVD-2022-50456

Malicious code in bioql PyPI...

EUVD-2023-42635

Malicious code in bioql PyPI...

EUVD-2022-50459

Malicious code in bioql PyPI...

EUVD-2024-52663

Malicious code in bioql PyPI...

EUVD-2025-26145

Malicious code in bioql PyPI...

EUVD-2023-42636

Malicious code in bioql PyPI...

EUVD-2022-48583

Malicious code in bioql PyPI...

EUVD-2023-34733

Malicious code in bioql PyPI...

EUVD-2025-26144

Malicious code in bioql PyPI...

CVE-2025-57293

A command injection vulnerability in COMFAST CF-XR11 firmware V2.7.2 exists in the multipppoe API, processed by the sub423930 function in /usr/bin/webmgnt. The phyinterface parameter is not sanitized, allowing attackers to inject arbitrary commands via a POST request to...

CVE-2025-57293

A command injection vulnerability in COMFAST CF-XR11 firmware V2.7.2 exists in the multipppoe API, processed by the sub423930 function in /usr/bin/webmgnt. The phyinterface parameter is not sanitized, allowing attackers to inject arbitrary commands via a POST request to...

PT-2025-38482

Name of the Vulnerable Software and Affected Versions COMFAST CF-XR11 version V2.7.2 Description A command injection issue exists in the multi pppoe API, processed by the sub 423930 function. The phy interface parameter is not sanitized, allowing attackers to inject arbitrary commands via a POST...

CVE-2025-57293

COMFAST CF-XR11 firmware V2.7.2 is affected by a command injection in the multi_pppoe API (sub_423930 in /usr/bin/webmgnt). The phy_interface parameter is not sanitized, allowing an attacker to inject commands via POST to /cgi-bin/mbox-config?method=SET&section=multi_pppoe; when action=one_click_...

COMFAST CF-XR11 安全漏洞

COMFAST CF-XR11 is a wireless router from China Four Seas Zonglian COMFAST. A security vulnerability exists in COMFAST CF-XR11 version V2.7.2, which stems from an uncleaned phyinterface parameter in the multipppoe API, which could lead to a command injection attack...

CVE-2025-57293

A command injection vulnerability in COMFAST CF-XR11 firmware V2.7.2 exists in the multipppoe API, processed by the sub423930 function in /usr/bin/webmgnt. The phyinterface parameter is not sanitized, allowing attackers to inject arbitrary commands via a POST request to...