283 matches found
CVE-2026-38819
openNDS versions before 11.0.0 contain multiple memory leaks that allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes, resulting in a denial of service. The CVSS 3.1 score is 5.3 (MEDIUM) with an adjacent network vector and ...
EUVD-2026-67359
Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes...
CVE-2026-38819
Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes...
CVE-2026-38819
Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes...
CVE-2026-38821: Heap-based Buffer Overflow
A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in httpmicrohttpd.c...
CVE-2026-38820: Improper Neutralization of Special Elements used in an OS Command
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /openndspreauth/ endpoint because of libopennds.sh...
PT-2026-82833
A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon denial of service and potentially achieve remote code execution. This is in http microhttpd.c...
PT-2026-82831
Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes...
PT-2026-82832
openNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command injection through the fas query parameter on the /opennds preauth/ endpoint because of libopennds.sh...
PT-2026-82834
In openNDS before 11.0.0, the client params.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by...
CVE-2026-38822: Improper Neutralization of Special Elements used in an OS Command
In openNDS before 11.0.0, the clientparams.sh script, invoked by the openNDS daemon to serve the authenticated client status page, is vulnerable to OS command injection through crafted HTTP GET query parameter keys. An authenticated captive portal user can inject arbitrary shell commands by...
CVE-2026-38819: Missing Release of Memory after Effective Lifetime
Multiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive portal network to exhaust all available memory on the device within minutes...
EUVD-2023-42132
Malicious code in bioql PyPI...
EUVD-2023-42137
Malicious code in bioql PyPI...
EUVD-2023-45620
Malicious code in bioql PyPI...
EUVD-2023-42138
Malicious code in bioql PyPI...
EUVD-2023-42136
Malicious code in bioql PyPI...
EUVD-2023-42139
Malicious code in bioql PyPI...