EUVD-2021-9862

Malicious code in bioql PyPI...

EUVD-2025-14966

Malicious code in bioql PyPI...

EUVD-2025-9207

Malicious code in bioql PyPI...

EUVD-2021-9956

Malicious code in bioql PyPI...

EUVD-2023-28296

Malicious code in bioql PyPI...

EUVD-2021-9954

Malicious code in bioql PyPI...

EUVD-2022-51939

Malicious code in bioql PyPI...

EUVD-2021-9857

Malicious code in bioql PyPI...

EUVD-2025-8422

Malicious code in bioql PyPI...

CVE-2025-11141

A security flaw has been discovered in Ruijie NBR2100G-E up to 20250919. Affected by this issue is the function listAction of the file /itboxpi/branchpassw.php?a=list. Performing manipulation of the argument city results in os command injection. The attack is possible to be carried out remotely...

CVE-2025-11113

A vulnerability was detected in CodeAstro Online Leave Application 1.0. Affected is an unknown function of the file /signup.php. Performing manipulation of the argument city results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. Other parameters...

CVE-2025-11141

A security flaw has been discovered in Ruijie NBR2100G-E up to 20250919. Affected by this issue is the function listAction of the file /itboxpi/branchpassw.php?a=list. Performing manipulation of the argument city results in os command injection. The attack is possible to be carried out remotely...

CVE-2025-11141 Ruijie NBR2100G-E branch_passw.php listAction os command injection

A security flaw has been discovered in Ruijie NBR2100G-E up to 20250919. Affected by this issue is the function listAction of the file /itboxpi/branchpassw.php?a=list. Performing manipulation of the argument city results in os command injection. The attack is possible to be carried out remotely...

CVE-2025-11141

Ruijie NBR2100G-E (up to 20250919) is affected. The vulnerability resides in the listAction function (file /itbox_pi/branch_passw.php?a=list), where manipulating the city parameter triggers OS command injection. The issue enables remote execution, with exploitation reported publicly. Other parame...

CVE-2025-11141 Ruijie NBR2100G-E branch_passw.php listAction os command injection

A security flaw has been discovered in Ruijie NBR2100G-E up to 20250919. Affected by this issue is the function listAction of the file /itboxpi/branchpassw.php?a=list. Performing manipulation of the argument city results in os command injection. The attack is possible to be carried out remotely...

Ruijie NBR2100G-E 操作系统命令注入漏洞

The Ruijie NBR2100G-E is a gateway routing device from China Ruijie Ruijie. An OS command injection vulnerability exists in Ruijie NBR2100G-E 20250919 and earlier versions, which stems from an incorrect operation of the parameter city in the file /itboxpi/branchpassw.php, which could lead to remo...

CVE-2025-11141: Improper Neutralization of Special Elements used in an OS Command

A security flaw has been discovered in Ruijie NBR2100G-E up to 20250919. Affected by this issue is the function listAction of the file /itboxpi/branchpassw.php?a=list. Performing manipulation of the argument city results in os command injection. The attack is possible to be carried out remotely...

PT-2025-39811

Name of the Vulnerable Software and Affected Versions Ruijie NBR2100G-E versions up to 20250919 Description A security flaw exists in Ruijie NBR2100G-E. The issue is related to os command injection. This occurs through manipulation of the city argument in the listAction function within the file...

CVE-2025-11113

A vulnerability was detected in CodeAstro Online Leave Application 1.0. Affected is an unknown function of the file /signup.php. Performing manipulation of the argument city results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. Other parameters...

CVE-2025-11113

A vulnerability was detected in CodeAstro Online Leave Application 1.0. Affected is an unknown function of the file /signup.php. Performing manipulation of the argument city results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. Other parameters...