EUVD-2022-27716

Malicious code in bioql PyPI...

EUVD-2022-52926

Malicious code in bioql PyPI...

EUVD-2024-41408

Malicious code in bioql PyPI...

EUVD-2022-27328

Malicious code in bioql PyPI...

EUVD-2023-58251

Malicious code in bioql PyPI...

EUVD-2025-9988

Malicious code in bioql PyPI...

EUVD-2025-31157

Malicious code in bioql PyPI...

EUVD-2022-53189

Malicious code in bioql PyPI...

EUVD-2021-2885

Malicious code in bioql PyPI...

EUVD-2025-5493

Malicious code in bioql PyPI...

EUVD-2022-35585

Malicious code in bioql PyPI...

EUVD-2024-49451

Malicious code in bioql PyPI...

EUVD-2021-7564

Malicious code in bioql PyPI...

EUVD-2025-20201

Malicious code in bioql PyPI...

CVE-2025-59817

This vulnerability allows attackers to execute arbitrary commands on the underlying system. Because the web portal runs with root privileges, successful exploitation grants full control over the device, potentially compromising its availability, confidentiality, and integrity...

CVE-2025-59817 Authenticated Remote Code Execution in zForm_auto_config

This vulnerability allows attackers to execute arbitrary commands on the underlying system. Because the web portal runs with root privileges, successful exploitation grants full control over the device, potentially compromising its availability, confidentiality, and integrity...

CVE-2025-59817

CVE-2025-59817 is an authenticated remote code execution affecting Zenitel ICX500/ICX510 gateways (zForm_auto_config). The vulnerability allows an authenticated attacker to execute arbitrary commands on the device; the web portal runs with root privileges, enabling full control and impacting avai...

CVE-2025-59817 Authenticated Remote Code Execution in zForm_auto_config

This vulnerability allows attackers to execute arbitrary commands on the underlying system. Because the web portal runs with root privileges, successful exploitation grants full control over the device, potentially compromising its availability, confidentiality, and integrity...

CVE-2025-27037

Memory corruption while processing configdev IOCTL when camera kernel driver drops its reference to CPU buffers...

CVE-2025-9495

The Vitogate 300 web interface fails to enforce proper server-side authentication and relies on frontend-based authentication controls. This allows an attacker to simply modify HTML elements in the browser’s developer tools to bypass login restrictions. By removing specific UI elements, an attack...