EUVD-2025-10852

Malicious code in bioql PyPI...

EUVD-2025-10829

Malicious code in bioql PyPI...

EUVD-2022-29916

Malicious code in bioql PyPI...

EUVD-2025-2077

Malicious code in bioql PyPI...

EUVD-2023-38413

Malicious code in bioql PyPI...

EUVD-2022-27103

Malicious code in bioql PyPI...

EUVD-2025-8046

Malicious code in bioql PyPI...

EUVD-2025-14056

Malicious code in bioql PyPI...

EUVD-2025-7154

Malicious code in bioql PyPI...

EUVD-2025-10854

Malicious code in bioql PyPI...

EUVD-2025-14858

Malicious code in bioql PyPI...

EUVD-2022-32815

Malicious code in bioql PyPI...

EUVD-2025-18958

Malicious code in bioql PyPI...

CVE-2023-28760

TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...

CVE-2023-28760

TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...

LERobot security vulnerabilities

lerobot is a robot programming library open-sourced by Hugging Face. A security vulnerability exists in huggingface LeRobot 0.3.3 and earlier versions, which stems from a lack of authentication in the ZeroMQ Socket Handler component and could lead to an attack within the local network...

SEAT Queue Ticket Kiosk code issue vulnerability

SEAT Queue Ticket Kiosk is a queue caller from SEAT. A code issue vulnerability exists in SEAT Queue Ticket Kiosk 20250827 and prior versions, which stems from a deserialization issue in the Java RMI Registry Handler component that could lead to a local network attack...

CVE-2025-52586

The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryption or obfuscation. This vulnerability may allow an attacker with access to a local network to intercept, manipulate, replay, or forge critical data, including read/write...

CVE-2025-52586 EG4 Electronics EG4 Inverters Cleartext Transmission of Sensitive Information

The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryption or obfuscation. This vulnerability may allow an attacker with access to a local network to intercept, manipulate, replay, or forge critical data, including read/write...

CVE-2025-6260

The embedded web server on the thermostat listed version ranges contain a vulnerability that allows unauthenticated attackers, either on the local area network or from the Internet via a router with port forwarding set up, to gain direct access to the thermostat's embedded web server and reset us...