EUVD-2023-38228

Malicious code in bioql PyPI...

EUVD-2023-38232

Malicious code in bioql PyPI...

EUVD-2023-38225

Malicious code in bioql PyPI...

EUVD-2023-38230

Malicious code in bioql PyPI...

EUVD-2023-38238

Malicious code in bioql PyPI...

EUVD-2024-26073

Malicious code in bioql PyPI...

EUVD-2022-27427

Malicious code in bioql PyPI...

EUVD-2021-7483

Malicious code in bioql PyPI...

EUVD-2023-38237

Malicious code in bioql PyPI...

EUVD-2024-26072

Malicious code in bioql PyPI...

CVE-2022-22280

Improper Neutralization of Special Elements used in an SQL Command leading to Unauthenticated SQL Injection vulnerability, impacting SonicWall GMS 9.3.1-SP2-Hotfix1, Analytics On-Prem 2.5.0.3-2520 and earlier versions...

CVE-2021-20020

A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root...

CVE-2021-20030

SonicWall GMS is vulnerable to file path manipulation resulting that an unauthenticated attacker can gain access to web directory containing application's binaries and configuration files...

CVE-2024-48336

The install function of ProviderInstaller.java in Magisk App before canary version 27007 does not verify the GMS app before loading it, which allows a local untrusted app with no additional privileges to silently execute arbitrary code in the Magisk app and escalate privileges to root via a craft...

CVE-2024-48336

CVE-2024-48336 affects Magisk App; the install() function in ProviderInstaller.java fails to verify the GMS app before loading it, permitting a local untrusted app to silently execute code in Magisk and escalate to root. Affected: Magisk App builds before Canary 27007. Root cause: loading code fr...

Exploit for CVE-2024-48336

Introduction This is an exploit for a vulnerability CVE-2024-...

gms-mediaservices.de Cross Site Scripting vulnerability OBB-3937913

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SonicWALL GMS Virtual Appliance ECMClientAuthenticator Hard-Coded Credential Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of SonicWALL GMS Virtual Appliance. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ECMClientAuthenticator class. The issue results from the use of a...

SonicWALL GMS Virtual Appliance ECMPolicy XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of SonicWALL GMS Virtual Appliance. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

CVE-2024-29011

Use of hard-coded password in the GMS ECM endpoint leading to authentication bypass vulnerability. This issue affects GMS: 9.3.4 and earlier versions...