EUVD-2025-31457

Malicious code in bioql PyPI...

EUVD-2025-25876

Malicious code in bioql PyPI...

EUVD-2025-25398

Malicious code in bioql PyPI...

EUVD-2025-25650

Malicious code in bioql PyPI...

EUVD-2025-25766

Malicious code in bioql PyPI...

EUVD-2025-24100

Malicious code in bioql PyPI...

EUVD-2025-24123

Malicious code in bioql PyPI...

EUVD-2025-24686

Malicious code in bioql PyPI...

EUVD-2025-24098

Malicious code in bioql PyPI...

EUVD-2025-30388

Malicious code in bioql PyPI...

EUVD-2025-30788

Malicious code in bioql PyPI...

EUVD-2025-31473

Malicious code in bioql PyPI...

EUVD-2025-26136

Malicious code in bioql PyPI...

The vulnerability of the formexeCommand()/goform/exeCommand function of the cmdinput component in the Tenda AC9 and AC15 microprogrammable routers allows a attacker to execute arbitrary commands.

The vulnerability of the formexeCommand function /goform/exeCommand of the cmdinput component in the Tenda AC9 and AC15 microprogrammed devices lies in the lack of measures to neutralize special elements used in the operating system’s command when processing the path parameter. Exploiting this...

CVE-2025-11117

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formWrlExtraGet of the file /goform/GstDhcpSetSer. This manipulation of the argument dips causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclose...

D-Link DIR-823X Command Injection Vulnerability (CNVD-2025-23368)

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability, which originates from the incorrect operation of the function ucidel on the parameter delvalue in the file /goform/deleteprohibiting, which can be exploited by an...

Tenda AC18 Command Injection Vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a command injection vulnerability that originates from the mishandling of the lanIp parameter by an unknown function in the...

D-Link DIR-823X Command Injection Vulnerability (CNVD-2025-23372)

The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability that originates from a misuse of the parameter delvalue in the file /goform/deleteofflinedevice, which can be exploited by an attacker to cause a command injection...

The vulnerability of the /goform/saveAutoQos software for Tenda AC18 routers allows a attacker to cause a service failure.

The vulnerability of the /goform/saveAutoQos microprogramming system for Tenda AC18 routers lies in the fact that the write operation exceeds the buffer limits. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

CVE-2025-11123

A flaw has been found in Tenda AC18 15.03.05.19. This impacts an unknown function of the file /goform/saveAutoQos. This manipulation of the argument enable causes stack-based buffer overflow. The attack may be initiated remotely. The exploit has been published and may be used...