33408 matches found
EUVD-2025-201332
Malicious code in module-listener npm...
EUVD-2025-201243
A vulnerability was determined in JIZHICMS up to 2.5.5. The affected element is the function deleteAll/findAll/delete of the file /index.php/admins/Comment/deleteAll.html of the component Batch Delete Comments. Executing manipulation can lead to sql injection. The attack can be launched remotely...
EUVD-2025-201151
Malicious code in beep-types npm...
EUVD-2025-201146
Malicious code in elf-stats-mulled-ornament-810 npm...
EUVD-2025-201245
A lack of Management Frame Protection in Waveshare RS232/485 TO WIFI ETH B Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 allows attackers to execute de-authentication attacks, allowing crafted deauthentication and disassociation frames to be broadca...
EUVD-2025-201247
Waveshare RS232/485 TO WIFI ETH B Serial to Ethernet/Wi-Fi Gateway Firmware V3.1.1.0: HW 4.3.2.1: Webpage V7.04T.07.002880.0301 was discovered to transmit Administrator credentials in plaintext...
EUVD-2025-201241
Akamai Ghost on Akamai CDN edge servers before 2025-11-17 has a chunked request body processing error that can result in HTTP request smuggling. When Akamai Ghost receives an invalid chunked body that includes a chunk size different from the actual size of the following chunk data, under certain...
EUVD-2025-201134
Malicious code in email-validated npm...
EUVD-2025-201105
An issue was discovered in Fanvil x210 V2 2.12.20 allowing unauthenticated attackers on the local network to access administrative functions of the device e.g. file upload, firmware update, reboot... via a crafted authentication bypass...
EUVD-2025-201120
Malicious code in elf-stats-evergreen-pantry-410 npm...
EUVD-2025-201028
Malicious code in elf-stats-rooftop-cocoa-966 npm...
EUVD-2025-200989
Aquarius Desktop 3.0.069 for macOS stores user authentication credentials in the local file /Library/Application Support/Aquarius/aquarius.settings using a weak obfuscation scheme. The password is "encrypted" through predictable byte-substitution that can be trivially reversed, allowing immediate...
EUVD-2025-200986
WebPros Plesk before 18.0.73.5 and 18.0.74 before 18.0.74.2 on Linux allows remote authenticated users to execute arbitrary code as root via domain creation. The attacker needs "Create and manage sites" with "Domains management" and "Subdomains management."...
EUVD-2025-200987
A local privilege escalation vulnerability exists in the InstallationHelper service included with Plugin Alliance Installation Manager v1.4.0 for macOS. The service accepts unauthenticated XPC connections and executes input via system, which may allow a local user to execute arbitrary commands wi...
EUVD-2025-201036
Malicious code in stats-engine npm...
EUVD-2025-201042
Malicious code in unified10 npm...
EUVD-2025-201044
Malicious code in elf-stats-silvered-stocking-120 npm...
EUVD-2025-201046
Malicious code in remark-stringify10 npm...