EUVD-2025-21356

Malicious code in bioql PyPI...

EUVD-2024-16963

Malicious code in bioql PyPI...

EUVD-2024-48955

Malicious code in bioql PyPI...

EUVD-2023-33836

Malicious code in bioql PyPI...

EUVD-2025-28764

Malicious code in bioql PyPI...

EUVD-2025-17397

Malicious code in bioql PyPI...

EUVD-2025-15597

Malicious code in bioql PyPI...

EUVD-2025-21213

Malicious code in bioql PyPI...

EUVD-2022-6160

Malicious code in bioql PyPI...

EUVD-2025-2121

Malicious code in bioql PyPI...

EUVD-2025-21820

Malicious code in bioql PyPI...

EUVD-2024-27431

Malicious code in bioql PyPI...

EUVD-2023-59322

Malicious code in bioql PyPI...

CVE-2025-59538: Uncaught Exception

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the default configuration, the /api/webhook endpoi...

SUSE CVE-2025-9648

A vulnerability in the CivetWeb library's function mghandleformrequest allows remote attackers to trigger a denial of service DoS condition. By sending a specially crafted HTTP POST request containing a null byte in the payload, the server enters an infinite loop during form data parsing. Multipl...

CVE-2025-30247

An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST...

CVE-2025-30247

CVE-2025-30247 is an OS command injection in the web UI of Western Digital My Cloud NAS on firmware prior to 5.31.108. A remote attacker can execute arbitrary system commands via a specially crafted HTTP POST. Affected products are Western Digital My Cloud firmware versions before 5.31.108. The C...

CVE-2025-9648 Denial of Service in CivetWeb

A vulnerability in the CivetWeb library's function mghandleformrequest allows remote attackers to trigger a denial of service DoS condition. By sending a specially crafted HTTP POST request containing a null byte in the payload, the server enters an infinite loop during form data parsing. Multipl...

CVE-2025-30247: Improper Neutralization of Special Elements used in an OS Command

An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST...

CVE-2025-11073 Keyfactor RG-EW5100BE HTTP POST Request cmd command injection

A vulnerability was detected in Keyfactor RG-EW5100BE EW3.0B11P280EW5100BE-PRO12183019. The affected element is an unknown function of the file /cgi-bin/luci/api/cmd of the component HTTP POST Request Handler. The manipulation of the argument url results in command injection. The attack can be...