219 matches found
EUVD-2021-33427
Malicious code in bioql PyPI...
EUVD-2024-42852
Malicious code in bioql PyPI...
EUVD-2025-11884
Malicious code in bioql PyPI...
EUVD-2023-26466
Malicious code in bioql PyPI...
EUVD-2023-38294
Malicious code in bioql PyPI...
EUVD-2021-2806
Malicious code in bioql PyPI...
EUVD-2025-30995
Malicious code in bioql PyPI...
EUVD-2023-31713
Malicious code in bioql PyPI...
EUVD-2025-23640
Malicious code in bioql PyPI...
EUVD-2025-5402
Malicious code in bioql PyPI...
EUVD-2022-28461
Malicious code in bioql PyPI...
upload-server-for-novi-software-security
project: "TP-Link TL-WR841N Firmware Security Assessment" descr...
CVE-2025-10095
A SQL injection vulnerability has been identified in the SMPP server component of the SMSEagle firmware, specifically affecting the handling of certain parameters within the server's database interactions. The vulnerability is isolated to the SMPP server, which operates with its own dedicated...
CVE-2025-38729
CVE-2025-38729 relates to the Linux kernel ALSA USB-audio driver and a validation issue with UAC3 power domain descriptors. The root cause is insufficient verification of the descriptor length (bLength), which could allow out-of-bounds accesses via malicious firmware. The vulnerability affects th...
CVE-2025-47324 Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware
Information disclosure while accessing and modifying the PIB file of a remote device via powerline...
PT-2025-31971 · U-Boot +1 · U-Boot +1
Name of the Vulnerable Software and Affected Versions: U-Boot version 1.1.3 Description: A lack of signature verification in the bootloader allows attackers to install crafted firmware files, leading to arbitrary code execution. Recommendations: Update to a newer version that includes signature...
CVE-2025-52361
Insecure permissions in the script /etc/init.d/lighttpd in AK-Nord USB-Server-LXL Firmware v0.0.16 Build 2023-03-13 allows a locally authenticated low-privilege user to execute arbitrary commands with root privilege via editing this script which is executed with root-privileges on any interaction...
CVE-2025-7357
LITEON IC48A firmware versions prior to 01.00.19r and LITEON IC80A firmware versions prior to 01.01.12e store FTP-server-access-credentials in cleartext in their system logs...
Belkin F9K1122 Command Injection Vulnerability (CNVD-2025-20834)
The Belkin F9K1122 is a WiFi signal extender from Belkin Canada. The Belkin F9K1122 suffers from a command injection vulnerability that originates from a misbehavior of the parameters mwanipaddr/mwannetmask/mwangateway/mwanstaticdns1/mwanstaticdns2 in the file /goform/formSetWanStatic. can be...
