EUVD-2021-33118

Malicious code in bioql PyPI...

EUVD-2021-31552

Malicious code in bioql PyPI...

EUVD-2021-29608

Malicious code in bioql PyPI...

EUVD-2022-37035

Malicious code in bioql PyPI...

EUVD-2025-24564

Malicious code in bioql PyPI...

EUVD-2023-46283

Malicious code in bioql PyPI...

EUVD-2022-45253

Malicious code in bioql PyPI...

EUVD-2023-54263

Malicious code in bioql PyPI...

EUVD-2024-50535

Malicious code in bioql PyPI...

EUVD-2023-34787

Malicious code in bioql PyPI...

EUVD-2023-32490

Malicious code in bioql PyPI...

EUVD-2024-53876

Malicious code in bioql PyPI...

EUVD-2025-26643

Malicious code in bioql PyPI...

EUVD-2025-32306

Malicious code in bioql PyPI...

EUVD-2025-15092

Malicious code in bioql PyPI...

CVE-2025-60787

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as imagefilename. Unsanitized user input is written to Motion configuration files, allowing remote authenticated attackers with admin access to achieve code execution when Motion is restarted...

CVE-2025-60787

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as imagefilename. Unsanitized user input is written to Motion configuration files, allowing remote authenticated attackers with admin access to achieve code execution when Motion is restarted...

CVE-2025-60787

MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as imagefilename. Unsanitized user input is written to Motion configuration files, allowing remote authenticated attackers with admin access to achieve code execution when Motion is restarted...

CVE-2025-60787

motionEye versions 0.43.1b4 and earlier are vulnerable to OS Command Injection due to a lack of server-side sanitization for the image_file_name configuration parameter. While the web UI performs client-side validation, an attacker can bypass this to inject arbitrary shell commands using subshell...

PT-2025-40530

Name of the Vulnerable Software and Affected Versions MotionEye versions 0.43.1b4 and earlier Description MotionEye is susceptible to a command injection issue that allows attackers to achieve Remote Code Execution RCE. The vulnerability arises because MotionEye writes user-supplied values direct...