EUVD-2022-31778

Malicious code in bioql PyPI...

EUVD-2022-31779

Malicious code in bioql PyPI...

EUVD-2022-31781

Malicious code in bioql PyPI...

EUVD-2022-31783

Malicious code in bioql PyPI...

EUVD-2022-31785

Malicious code in bioql PyPI...

EUVD-2022-30611

Malicious code in bioql PyPI...

EUVD-2022-26423

Malicious code in bioql PyPI...

EUVD-2023-26737

Malicious code in bioql PyPI...

EUVD-2022-34199

Malicious code in bioql PyPI...

EUVD-2022-31777

Malicious code in bioql PyPI...

EUVD-2022-31775

Malicious code in bioql PyPI...

EUVD-2022-30592

Malicious code in bioql PyPI...

EUVD-2022-30564

Malicious code in bioql PyPI...

PT-2025-31190 · Undefined · Undefined

CISA Emergency Directive on Industrial Control Systems ICS CISA released Emergency Directive ED 25-03, addressing a critical remote code execution vulnerability CVE-2025-38810 in the "InHand Networks IR615" industrial cellular router. This device is commonly used for...

CVE-2023-22598

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'. An unauthorized user with privileged access to the...

CVE-2023-22600

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-284: Improper Access Control. They allow unauthenticated devices to subscribe to MQTT topics on the same network as the device manager. An...

CVE-2023-22599

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-760: Use of a One-way Hash with a Predictable Salt. They send MQTT credentials in response to HTTP/HTTPS requests from the cloud platform. These...

CVE-2023-22601

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-330: Use of Insufficiently Random Values. They do not properly randomize MQTT ClientID parameters. An unauthorized user could calculate this...

CVE-2022-27277

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain an arbitrary file deletion vulnerability via the function sub17C08...

CVE-2022-27270

InHand Networks InRouter 900 Industrial 4G Router before v1.0.0.r11700 was discovered to contain a remote code execution RCE vulnerability via the component ipsecsecrets. This vulnerability is triggered via a crafted packet...