Improper Verification of Cryptographic Signature

Overview jsrsasign is a free pure JavaScript cryptographic library. Affected versions of this package are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in KJUR.crypto.DSA.setPublic and the related DSA/X509 verification flow in src/dsa-2.0.j...

UBUNTU-CVE-2025-68295

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix memory leak in cifsconstructtcon When having a multiuser mount with domain= specified and using cifscreds, cifssetcifscreds will end up setting @ctx-domainname, so it needs to be freed before leaving...

CVE-2025-60702

A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592B20191022ALL within the system.so binary. The setDiagnosisCfg function retrieves the ipDoamin parameter from user input via websGetVar and concatenates it directly into a ping system command executed via...

Astra Linux – Vulnerability in libsoup3, libsoup2.4

A denial-of-service vulnerability has been identified in the libsoup HTTP client library. This flaw can be triggered when a libsoup client receives an HTTP response with a status code of 401 Unauthorized, which contains a specially crafted domain parameter within the WWW-Authenticate header...

CVE-2025-11386

CVE-2025-11386 affects Tenda AC15 router (firmware 15.03.05.18) via the POST handler in the /goform/SetDDNSCfg endpoint. The root cause is a stack-based buffer overflow triggered by manipulating the ddnsEn argument, indicating an input length validation failure in an unknown function of the POST ...

EUVD-2009-2271

Malware in sbrugna...

EUVD-2012-1797

Malware in sbrugna...

EUVD-2020-20167

Malware in sbrugna...

EUVD-2006-6531

Malware in sbrugna...

EUVD-2014-8188

Malware in sbrugna...

EUVD-2011-5093

Malware in sbrugna...

EUVD-2007-6145

Malware in sbrugna...

EUVD-2023-48377

Malicious code in bioql PyPI...

VulnCheck KEV: CVE-2025-7414

A vulnerability classified as critical was found in Tenda O3V2 1.0.0.123880. This vulnerability affects the function fromNetToolGet of the file /goform/setPingInfo of the component httpd. The manipulation of the argument domain leads to os command injection. The attack can be initiated remotely...

OESA-2025-2279 libsoup3 security update

Libsoup is an HTTP library implementation in C. It was originally part of a SOAP Simple Object Access Protocol implementation called Soup, but the SOAP and non-SOAP parts have now been split into separate packages. Security Fixes: A denial-of-service vulnerability has been identified in the libso...

Axelor 安全漏洞

Axelor is a modular development framework from the French company Axelor. A security vulnerability exists in Axelor version 5.2.4, which stems from a Boolean SQL injection in the domain parameter and could lead to a data leak...

Tenda O3V2 /goform/setPingInfo file command injection vulnerability

Tenda O3V2 is an outdoor wireless bridge from Tenda, China. Tenda O3V2 suffers from a command injection vulnerability, which originates from the parameter domain in the file /goform/setPingInfo failing to correctly filter constructed command special characters, commands, etc. The vulnerability is...

CVE-2025-7414

A vulnerability classified as critical was found in Tenda O3V2 1.0.0.123880. This vulnerability affects the function fromNetToolGet of the file /goform/setPingInfo of the component httpd. The manipulation of the argument domain leads to os command injection. The attack can be initiated remotely...

Tenda O3V2 命令注入漏洞

Tenda O3V2 is an outdoor wireless bridge from Tenda, China. Tenda O3V2 suffers from a command injection vulnerability, which originates from the parameter domain in the file /goform/setPingInfo failing to correctly filter constructed command special characters, commands, etc. The vulnerability is...

CVE-2023-31664

A reflected cross-site scripting XSS vulnerability in /authenticationendpoint/login.do of WSO2 API Manager before 4.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tenantDomain parameter...