EUVD-2025-205589

Picklescan missing detection when calling pty.spawn...

EUVD-2025-205570

Malicious code in smtmlib PyPI...

EUVD-2025-205530

A security vulnerability has been detected in PbootCMS up to 3.2.12. The affected element is the function getuserip of the file core/function/handle.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to use of less trusted source. The attack can be initiat...

EUVD-2025-205472

Malicious code in crypo PyPI...

EUVD-2025-205473

Malicious code in crpto PyPI...

EUVD-2025-205452

ruint affected by unsoundness of safe reciprocalmg10...

EUVD-2025-205453

Self-hosted n8n has Legacy Code node that enables arbitrary file read/write...

EUVD-2025-205444

Malicious code in bola511 npm...

EUVD-2025-205426

Malicious code in aiogram-3 PyPI...

EUVD-2025-205417

Malicious code in magic-poc npm...

EUVD-2025-205398

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

EUVD-2025-205399

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

EUVD-2025-205386

Malicious code in ing-feat-mortgage-consent-starter npm...

EUVD-2025-205375

Malicious code in pxdbench PyPI...

EUVD-2025-205295

Teradek VidiU Pro 3.0.3 contains a cross-site request forgery vulnerability that allows attackers to change administrative passwords without proper request validation. Attackers can craft malicious web pages that automatically submit password change requests to the device when a logged-in...

EUVD-2025-205300

KYOCERA Net Admin 3.4.0906 contains a cross-site request forgery vulnerability that allows attackers to create administrative users without proper request validation. Attackers can craft malicious web pages that automatically submit forms to add new admin accounts with predefined credentials when...

EUVD-2025-205304

Teradek VidiU Pro 3.0.3 contains a server-side request forgery vulnerability in the management interface that allows attackers to manipulate GET parameters 'url' and 'xmlurl'. Attackers can exploit this flaw to bypass firewalls, initiate network enumeration, and potentially trigger external HTTP...

EUVD-2025-205306

Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/loginbannerw.cgi XSS via a crafted banner...

EUVD-2025-205299

KYOCERA Net Admin 3.4.0906 contains an XML External Entity XXE injection vulnerability in the Multi-Set Template Editor that allows unauthenticated attackers to read arbitrary system files. Attackers can craft a malicious XML file with external entity references to retrieve sensitive configuratio...

EUVD-2025-205312

iSeeQ Hybrid DVR WH-H4 1.03R contains an unauthenticated vulnerability in the getjpeg script that allows unauthorized access to live video streams. Attackers can retrieve video snapshots from specific camera channels by sending requests to the /cgi-bin/getjpeg endpoint without authentication...