EUVD-2023-54263

Malicious code in bioql PyPI...

EUVD-2025-20861

Malicious code in bioql PyPI...

EUVD-2022-44820

Malicious code in bioql PyPI...

EUVD-2024-53876

Malicious code in bioql PyPI...

EUVD-2023-32490

Malicious code in bioql PyPI...

EUVD-2022-2798

Malicious code in bioql PyPI...

EUVD-2025-6899

Malicious code in bioql PyPI...

EUVD-2024-36942

Malicious code in bioql PyPI...

EUVD-2025-22121

Malicious code in bioql PyPI...

EUVD-2025-20846

Malicious code in bioql PyPI...

EUVD-2022-40324

Malicious code in bioql PyPI...

EUVD-2023-0207

Malicious code in bioql PyPI...

EUVD-2021-33118

Malicious code in bioql PyPI...

EUVD-2021-31552

Malicious code in bioql PyPI...

EUVD-2022-41617

Malicious code in bioql PyPI...

CVE-2025-60787

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as imagefilename. Unsanitized user input is written to Motion configuration files, allowing remote authenticated attackers with admin access to achieve code execution when Motion is restarted...

CVE-2025-60787

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as imagefilename. Unsanitized user input is written to Motion configuration files, allowing remote authenticated attackers with admin access to achieve code execution when Motion is restarted...

PT-2025-40530

Name of the Vulnerable Software and Affected Versions MotionEye versions 0.43.1b4 and earlier Description MotionEye is susceptible to a command injection issue that allows attackers to achieve Remote Code Execution RCE. The vulnerability arises because MotionEye writes user-supplied values direct...

CVE-2025-60787

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as imagefilename. Unsanitized user input is written to Motion configuration files, allowing remote authenticated attackers with admin access to achieve code execution when Motion is restarted...

CVE-2025-60787

Summary: CVE-2025-60787 affects MotionEye versions ≤ 0.43.1b4, enabling OS Command Injection via unsanitized configuration fields such as image_file_name written to /etc/motioneye/camera-*.conf. On restart, the vulnerable Motion process parses these fields as shell commands, leading to Remote Cod...