416 matches found
EUVD-2023-44300
Malicious code in bioql PyPI...
EUVD-2023-44299
Malicious code in bioql PyPI...
EUVD-2022-3497
Malicious code in bioql PyPI...
EUVD-2023-1308
Malicious code in bioql PyPI...
EUVD-2022-5478
Malicious code in bioql PyPI...
EUVD-2022-2627
Malicious code in bioql PyPI...
EUVD-2022-6399
Malicious code in bioql PyPI...
EUVD-2022-46973
Malicious code in bioql PyPI...
CVE-2025-54782
Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution RCE vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API...
CVE-2025-7075
A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /upload.cgi of the component HTTP Endpoint. The manipulation leads to unrestricted upload. The attack needs to be done within...
CVE-2025-7075
CVE-2025-7075 concerns BlackVue Dashcam 590X (up to 20250624) with a vulnerability in the HTTP Endpoint /upload.cgi that allows unrestricted file upload. Root cause: manipulation of an onboard HTTP endpoint leading to unrestricted upload within the local network. Impact: high confidentiality, int...
CVE-2025-7075 BlackVue Dashcam 590X HTTP Endpoint upload.cgi unrestricted upload
A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /upload.cgi of the component HTTP Endpoint. The manipulation leads to unrestricted upload. The attack needs to be done within...
PT-2025-28038 · Blackvue · Blackvue Dashcam 590X
Name of the Vulnerable Software and Affected Versions: BlackVue Dashcam 590X up to 20250624 Description: A critical vulnerability affects an unknown functionality of the file /upload.cgi of the component HTTP Endpoint, leading to unrestricted upload. The attack must be done within the local...
CVE-2025-27022
A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests. Details: Lack or insufficient validation of user-supplied input allows authenticated users to access all files on the target...
CVE-2025-27022 Path Traversal Vulnerability in Infinera G42
A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests. Details: Lack or insufficient validation of user-supplied input allows authenticated users to access all files on the target...
PT-2025-27615
Name of the Vulnerable Software and Affected Versions: Infinera G42 version R6.1.3 Description: The issue allows remote authenticated users to download all OS files via HTTP requests due to a path traversal vulnerability in the WebGUI HTTP endpoint. This is caused by a lack or insufficient...
PT-2025-26664
Name of the Vulnerable Software and Affected Versions Linksys E-Series routers versions prior to a firmware update Linksys E4200 Linksys E3200 Linksys E3000 Linksys E2500 Linksys E2100L Linksys E2000 Linksys E1550 Linksys E1500 Linksys E1200 Linksys E1000 Linksys E900 Description An OS command...
vLLM DOS: Remotely kill vllm over http with invalid JSON schema
Summary Hitting the /v1/completions API with a invalid jsonschema as a Guided Param will kill the vllm server Details The following API call venv derekh@ip-172-31-15-108 $ curl -s http://localhost:8000/v1/completions -H "Content-Type: application/json" -d '"model":...