448 matches found
EUVD-2022-4827
Malicious code in bioql PyPI...
EUVD-2022-6285
Malicious code in bioql PyPI...
EUVD-2022-5434
Malicious code in bioql PyPI...
EUVD-2021-6732
Malicious code in bioql PyPI...
EUVD-2022-5680
Malicious code in bioql PyPI...
EUVD-2025-7610
Malicious code in bioql PyPI...
EUVD-2024-53490
Malicious code in bioql PyPI...
EUVD-2025-20244
Malicious code in bioql PyPI...
EUVD-2023-1864
Malicious code in bioql PyPI...
EUVD-2021-6826
Malicious code in bioql PyPI...
EUVD-2025-7072
Malicious code in bioql PyPI...
EUVD-2022-1569
Malicious code in bioql PyPI...
EUVD-2021-27518
Malicious code in bioql PyPI...
PT-2025-38760
Name of the Vulnerable Software and Affected Versions Creacast Creabox Manager version 4.4.4 Description A critical Remote Code Execution issue exists in Creacast Creabox Manager version 4.4.4. An authenticated attacker can inject arbitrary Lua code into the configuration through the edit.php...
CVE-2025-55202 Opencast has a partial path traversal vulnerability in UI config
Opencast is a free, open-source platform to support the management of educational audio and video content. In version 18.0 and versions before 17.7, the protections against path traversal attacks in the UI config module are insufficient, still partially allowing for attacks in very specific cases...
CVE-2025-55740
CVE-2025-55740 affects nginx-defender, a WAF/threat-detection system. The vulnerability is a configuration flaw where default credentials in example files (config.yaml and docker-compose.yml) are left unchanged (default_password: change_me_please; GF_SECURITY_ADMIN_PASSWORD=admin123). If exposed ...
CVE-2025-6000 Arbitrary Remote Code Execution via Plugin Catalog Abuse
A privileged Vault operator within the root namespace with write permission to sys/audit may obtain code execution on the underlying host if a plugin directory is set in Vault’s configuration. Fixed in Vault Community Edition 1.20.1 and Vault Enterprise 1.20.1, 1.19.7, 1.18.12, and 1.16.23...
Belkin F9K1122 Command Injection Vulnerability (CNVD-2025-20834)
The Belkin F9K1122 is a WiFi signal extender from Belkin Canada. The Belkin F9K1122 suffers from a command injection vulnerability that originates from a misbehavior of the parameters mwanipaddr/mwannetmask/mwangateway/mwanstaticdns1/mwanstaticdns2 in the file /goform/formSetWanStatic. can be...
Jenkins Xooa Plugin vulnerability exposes unencrypted tokens to authenticated users
Jenkins Xooa Plugin 0.0.7 and earlier stores the Xooa Deployment Token unencrypted in its global configuration file on the Jenkins controller, where it can be viewed by users with access to the Jenkins controller file system...
