EUVD-2025-2077

Malicious code in bioql PyPI...

EUVD-2022-32815

Malicious code in bioql PyPI...

EUVD-2025-7154

Malicious code in bioql PyPI...

EUVD-2025-14858

Malicious code in bioql PyPI...

EUVD-2025-20272

Malicious code in bioql PyPI...

EUVD-2025-8046

Malicious code in bioql PyPI...

EUVD-2025-6666

Malicious code in bioql PyPI...

EUVD-2025-10852

Malicious code in bioql PyPI...

EUVD-2025-14056

Malicious code in bioql PyPI...

EUVD-2024-32371

Malicious code in bioql PyPI...

EUVD-2025-10854

Malicious code in bioql PyPI...

EUVD-2025-7171

Malicious code in bioql PyPI...

EUVD-2025-10829

Malicious code in bioql PyPI...

EUVD-2025-18958

Malicious code in bioql PyPI...

CVE-2023-28760

TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...

CVE-2023-28760

TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...

lerobot 安全漏洞

lerobot is a robot programming library open-sourced by Hugging Face. A security vulnerability exists in huggingface LeRobot 0.3.3 and earlier versions, which stems from a lack of authentication in the ZeroMQ Socket Handler component and could lead to an attack within the local network...

SEAT Queue Ticket Kiosk 代码问题漏洞

SEAT Queue Ticket Kiosk is a queue caller from SEAT. A code issue vulnerability exists in SEAT Queue Ticket Kiosk 20250827 and prior versions, which stems from a deserialization issue in the Java RMI Registry Handler component that could lead to a local network attack...

CVE-2025-52586

The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryption or obfuscation. This vulnerability may allow an attacker with access to a local network to intercept, manipulate, replay, or forge critical data, including read/write...

CVE-2025-52586 EG4 Electronics EG4 Inverters Cleartext Transmission of Sensitive Information

The MOD3 command traffic between the monitoring application and the inverter is transmitted in plaintext without encryption or obfuscation. This vulnerability may allow an attacker with access to a local network to intercept, manipulate, replay, or forge critical data, including read/write...