EUVD-2021-7585

Malicious code in bioql PyPI...

EUVD-2024-41888

Malicious code in bioql PyPI...

EUVD-2025-5952

Malicious code in bioql PyPI...

EUVD-2021-7583

Malicious code in bioql PyPI...

EUVD-2024-41883

Malicious code in bioql PyPI...

EUVD-2021-7586

Malicious code in bioql PyPI...

EUVD-2021-7582

Malicious code in bioql PyPI...

EUVD-2025-23505

Malicious code in bioql PyPI...

EUVD-2023-51385

Malicious code in bioql PyPI...

EUVD-2023-35755

Malicious code in bioql PyPI...

EUVD-2024-41894

Malicious code in bioql PyPI...

EUVD-2025-5951

Malicious code in bioql PyPI...

EUVD-2024-39090

Malicious code in bioql PyPI...

DrayTek Vigor Routers 安全漏洞

DrayTek Vigor Routers is a series of wireless routers from China-based DrayTek. A security vulnerability exists in DrayTek Vigor Routers that stems from the presence of uninitialized variables in the HTTP CGI request parameter handling component, which could lead to memory corruption and remote...

Vigor routers running DrayOS are vulnerable to RCE via EasyVPN and LAN web administration interface

Overview A remote code execution RCE vulnerability was discovered through the EasyVPN and LAN web administration interface of Vigor routers by Drayteck. A script in the LAN web administration interface uses an unitialized variable, allowing an attacker to inject arbitrary commands through memory...

PT-2025-40432

Name of the Vulnerable Software and Affected Versions DrayOS routers versions prior to the fixed firmware. Description A flaw exists in the HTTP CGI request arguments processing component of DrayOS routers, potentially allowing an attacker to execute code remotely RCE through memory corruption...

VulnCheck KEV: CVE-2024-45887

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to doOpenVPN...

VulnCheck KEV: CVE-2024-45884

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to setSWMGroup...

VulnCheck KEV: CVE-2024-45891

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to deletewlanprofile...

VulnCheck KEV: CVE-2024-45890

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to downloadovpn...