EUVD-2022-53451

Malicious code in bioql PyPI...

EUVD-2022-6160

Malicious code in bioql PyPI...

EUVD-2025-21820

Malicious code in bioql PyPI...

EUVD-2025-15593

Malicious code in bioql PyPI...

EUVD-2025-15578

Malicious code in bioql PyPI...

EUVD-2025-22272

Malicious code in bioql PyPI...

EUVD-2025-15597

Malicious code in bioql PyPI...

EUVD-2023-59329

Malicious code in bioql PyPI...

EUVD-2025-28764

Malicious code in bioql PyPI...

EUVD-2025-15644

Malicious code in bioql PyPI...

EUVD-2025-6714

Malicious code in bioql PyPI...

EUVD-2025-2121

Malicious code in bioql PyPI...

EUVD-2024-27431

Malicious code in bioql PyPI...

EUVD-2025-18475

Malicious code in bioql PyPI...

SUSE CVE-2025-9648

A vulnerability in the CivetWeb library's function mghandleformrequest allows remote attackers to trigger a denial of service DoS condition. By sending a specially crafted HTTP POST request containing a null byte in the payload, the server enters an infinite loop during form data parsing. Multipl...

CVE-2025-30247

An OS command injection vulnerability in user interface in Western Digital My Cloud firmware prior to 5.31.108 on NAS platforms allows remote attackers to execute arbitrary system commands via a specially crafted HTTP POST...

CVE-2025-30247

CVE-2025-30247 is an OS command injection in the web UI of Western Digital My Cloud NAS on firmware prior to 5.31.108. A remote attacker can execute arbitrary system commands via a specially crafted HTTP POST. Affected products are Western Digital My Cloud firmware versions before 5.31.108. The C...

CVE-2025-9648 Denial of Service in CivetWeb

A vulnerability in the CivetWeb library's function mghandleformrequest allows remote attackers to trigger a denial of service DoS condition. By sending a specially crafted HTTP POST request containing a null byte in the payload, the server enters an infinite loop during form data parsing. Multipl...

CVE-2025-11073 Keyfactor RG-EW5100BE HTTP POST Request cmd command injection

A vulnerability was detected in Keyfactor RG-EW5100BE EW3.0B11P280EW5100BE-PRO12183019. The affected element is an unknown function of the file /cgi-bin/luci/api/cmd of the component HTTP POST Request Handler. The manipulation of the argument url results in command injection. The attack can be...

PT-2025-39737

Name of the Vulnerable Software and Affected Versions Keyfactor RG-EW5100BE EW 3.0B11P280 EW5100BE-PRO 12183019 Description A flaw exists in Keyfactor RG-EW5100BE EW 3.0B11P280 EW5100BE-PRO 12183019. The issue is related to command injection stemming from the manipulation of the url argument with...