1029 matches found
EUVD-2023-41051
Malicious code in bioql PyPI...
EUVD-2023-38970
Malicious code in bioql PyPI...
EUVD-2022-33418
Malicious code in bioql PyPI...
EUVD-2023-37760
Malicious code in bioql PyPI...
EUVD-2021-31446
Malicious code in bioql PyPI...
EUVD-2024-53708
Malicious code in bioql PyPI...
EUVD-2021-31443
Malicious code in bioql PyPI...
EUVD-2022-30141
Malicious code in bioql PyPI...
EUVD-2022-33969
Malicious code in bioql PyPI...
EUVD-2023-38971
Malicious code in bioql PyPI...
EUVD-2022-52866
Malicious code in bioql PyPI...
CVE-2025-30247
An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST...
CVE-2025-9648 Denial of Service in CivetWeb
A vulnerability in the CivetWeb library's function mghandleformrequest allows remote attackers to trigger a denial of service DoS condition. By sending a specially crafted HTTP POST request containing a null byte in the payload, the server enters an infinite loop during form data parsing. Multipl...
The vulnerability of the strcpy() function in D-Link DCS-935L wireless HD cameras’ microprogramming software allows a intruder to execute arbitrary code.
The vulnerability of the strcpy function in D-Link DCS-935L wireless HD cameras’ microprogramming software lies in the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending a specially crafted POST...
CVE-2025-57296
Tenda AC6 router firmware 15.03.05.19 contains a command injection vulnerability in the formSetIptv function, which processes requests to the /goform/SetIPTVCfg web interface. When handling the list and vlanId parameters, the subADBC0 helper function concatenates these user-supplied values into...
Remote Code Execution (RCE)
flowise is vulnerable to Remote Code Execution RCE. The vulnerability is due to unsafe use of a dynamic Function constructor due to user-controlled input being executed, allowing attackers to run arbitrary JavaScript via a crafted POST request...
CVE-2025-56752
A vulnerability in the Ruijie RG-ES series switch firmware ESW1.01B1P39 enables remote attackers to fully bypass authentication mechanisms, providing them with unrestricted access to alter administrative settings and potentially seize control of affected devices via crafted HTTP POST request to...
Linux Distros Unpatched Vulnerability : CVE-2022-41444
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross Site Scripting XSS vulnerability in Cacti 1.2.21 via crafted POST request to graphsnew.php. CVE-2022-41444 Note that Nessus relies on the presence of the...
