EUVD-2024-41891

Malicious code in bioql PyPI...

EUVD-2025-23505

Malicious code in bioql PyPI...

EUVD-2024-41902

Malicious code in bioql PyPI...

EUVD-2024-45323

Malicious code in bioql PyPI...

EUVD-2024-41884

Malicious code in bioql PyPI...

EUVD-2024-41873

Malicious code in bioql PyPI...

EUVD-2024-41896

Malicious code in bioql PyPI...

EUVD-2024-39090

Malicious code in bioql PyPI...

EUVD-2024-41904

Malicious code in bioql PyPI...

EUVD-2024-41878

Malicious code in bioql PyPI...

EUVD-2024-41905

Malicious code in bioql PyPI...

EUVD-2024-41887

Malicious code in bioql PyPI...

EUVD-2024-41894

Malicious code in bioql PyPI...

DrayTek Vigor Routers 安全漏洞

DrayTek Vigor Routers is a series of wireless routers from China-based DrayTek. A security vulnerability exists in DrayTek Vigor Routers that stems from the presence of uninitialized variables in the HTTP CGI request parameter handling component, which could lead to memory corruption and remote...

Vigor routers running DrayOS are vulnerable to RCE via EasyVPN and LAN web administration interface

Overview A remote code execution RCE vulnerability was discovered through the EasyVPN and LAN web administration interface of Vigor routers by Drayteck. A script in the LAN web administration interface uses an unitialized variable, allowing an attacker to inject arbitrary commands through memory...

PT-2025-40432

Name of the Vulnerable Software and Affected Versions DrayOS routers versions prior to the fixed firmware. Description A flaw exists in the HTTP CGI request arguments processing component of DrayOS routers, potentially allowing an attacker to execute code remotely RCE through memory corruption...

VulnCheck KEV: CVE-2024-45888

DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to setapmapconfig.'...

VulnCheck KEV: CVE-2024-45887

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to doOpenVPN...

VulnCheck KEV: CVE-2024-48074

An authorized RCE vulnerability exists in the DrayTek Vigor2960 router version 1.4.4, where an attacker can place a malicious command into the table parameter of the doPPPoE function in the cgi-bin/mainfunction.cgi route, and finally the command is executed by the system function...

VulnCheck KEV: CVE-2024-45890

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to downloadovpn...