EUVD-2024-47202

Malicious code in bioql PyPI...

EUVD-2022-29913

Malicious code in bioql PyPI...

EUVD-2021-31011

Malicious code in bioql PyPI...

EUVD-2023-32343

Malicious code in bioql PyPI...

EUVD-2025-22544

Malicious code in bioql PyPI...

EUVD-2022-40944

Malicious code in bioql PyPI...

EUVD-2023-3237

Malicious code in bioql PyPI...

EUVD-2023-32395

Malicious code in bioql PyPI...

EUVD-2022-38109

Malicious code in bioql PyPI...

EUVD-2021-32632

Malicious code in bioql PyPI...

EUVD-2023-26478

Malicious code in bioql PyPI...

CVE-2025-11121 Tenda AC18 AdvSetLanip command injection

A security vulnerability has been detected in Tenda AC18 15.03.05.19. The impacted element is an unknown function of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and m...

CVE-2025-39851

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix NPD when refreshing an FDB entry with a nexthop object VXLAN FDB entries can point to either a remote destination or an FDB nexthop group. The latter is usually used in EVPN deployments where learning is disabled...

📄 Piciorgros TMO-100 Information Disclosure

Piciorgros TMO-100 suffers from an issue where it provides unauthorized log data access. It affects versions prior to 4.20. PDF advisory: https://rt-solutions.de/piciorgros/PiciorgrosTMO-100IP-Loggeren.pdf Classification -------------- - CWE-200: Exposure of Sensitive Information to an Unauthoriz...

net: dsa: clean up FDB, MDB, VLAN entries on unbind

...

CVE-2025-51381

An authentication bypass vulnerability exists in KCM3100 Ver1.4.2 and earlier. If this vulnerability is exploited, an attacker may bypass the authentication of the product from within the LAN to which the product is connected...

CVE-2025-51381

CVE-2025-51381 affects KAON KA CM3100 gateway versions 1.4.2 and earlier. The flaw is an authentication bypass that lets an attacker bypass product authentication from within the LAN to which the device is connected. Documented impact is that an attacker may access the device as if authenticated,...

CVE-2024-21833

Multiple TP-LINK products allow a network-adjacent unauthenticated attacker with access to the product to execute arbitrary OS commands. The affected device, with the initial configuration, allows login only from the LAN port or Wi-Fi...

CVE-2024-6044

Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the URL...

CVE-2024-50954

The XINJE XL5E-16T and XD5E-24R-E programmable logic controllers V3.5.3b-V3.7.2a have a vulnerability in handling Modbus messages. When a TCP connection is established with the above series of controllers within a local area network LAN, sending a specific Modbus message to the controller can cau...