EUVD-2023-28242

Malicious code in bioql PyPI...

EUVD-2023-42134

Malicious code in bioql PyPI...

EUVD-2021-32620

Malicious code in bioql PyPI...

EUVD-2021-9307

Malicious code in bioql PyPI...

EUVD-2021-32621

Malicious code in bioql PyPI...

EUVD-2023-42133

Malicious code in bioql PyPI...

EUVD-2023-28243

Malicious code in bioql PyPI...

EUVD-2022-44628

Malicious code in bioql PyPI...

EUVD-2024-52312

Malicious code in bioql PyPI...

EUVD-2021-32619

Malicious code in bioql PyPI...

EUVD-2025-32039

Malicious code in bioql PyPI...

EUVD-2025-29549

Malicious code in bioql PyPI...

EUVD-2022-40923

Malicious code in bioql PyPI...

CVE-2025-57389

A reflected cross-site scripting XSS vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. This vulnerability was fixed in OpenWRT v19.07.0...

CVE-2025-57389

A reflected cross-site scripting XSS vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. This vulnerability was fixed in OpenWRT v19.07.0...

CVE-2025-57389

A reflected cross-site scripting XSS vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. This vulnerability was fixed in OpenWRT v19.07.0...

PT-2025-40300

Name of the Vulnerable Software and Affected Versions Luci OpenWRT version 18.06.2 Description A reflected cross-site scripting XSS issue exists in the /admin/system/packages API endpoint of Luci OpenWRT. An attacker can execute arbitrary Javascript in a user's browser by providing a crafted...

CVE-2025-57389

A reflected cross-site scripting (XSS) vulnerability exists in the Luci OpenWRT v18.06.2 web management interface, specifically on the /admin/system/packages (or /cgi-bin/luci/admin/system/packages) endpoint. The root cause is insufficient input sanitization , which allows an attacker to break ou...

CVE-2025-57389: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. This vulnerability was fixed in OpenWRT v19.07.0...

CVE-2025-57389

A reflected cross-site scripting XSS vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. This vulnerability was fixed in OpenWRT v19.07.0...