711 matches found
EUVD-2023-28243
Malicious code in bioql PyPI...
EUVD-2021-32621
Malicious code in bioql PyPI...
EUVD-2024-52312
Malicious code in bioql PyPI...
EUVD-2023-42134
Malicious code in bioql PyPI...
EUVD-2023-42133
Malicious code in bioql PyPI...
EUVD-2025-32039
Malicious code in bioql PyPI...
EUVD-2023-28242
Malicious code in bioql PyPI...
EUVD-2021-32619
Malicious code in bioql PyPI...
EUVD-2022-44628
Malicious code in bioql PyPI...
CVE-2025-57389
A reflected cross-site scripting XSS vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. This vulnerability was fixed in OpenWRT v19.07.0...
CVE-2025-57389
A reflected cross-site scripting XSS vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. This vulnerability was fixed in OpenWRT v19.07.0...
CVE-2025-57389
A reflected cross-site scripting XSS vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. This vulnerability was fixed in OpenWRT v19.07.0...
PT-2025-40300
Name of the Vulnerable Software and Affected Versions Luci OpenWRT version 18.06.2 Description A reflected cross-site scripting XSS issue exists in the /admin/system/packages API endpoint of Luci OpenWRT. An attacker can execute arbitrary Javascript in a user's browser by providing a crafted...
CVE-2025-57389
A reflected cross-site scripting XSS vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. This vulnerability was fixed in OpenWRT v19.07.0...
OpenWRT Luci LTS 安全漏洞
OpenWRT Luci LTS is an OpenWRT open source web management interface for Linux distributions. A security vulnerability exists in OpenWRT Luci LTS version v18.06.2, which originates from the presence of reflective cross-site scripting in the /admin/system/packages endpoint, which could lead to the...
CVE-2025-57389
A reflected cross-site scripting (XSS) vulnerability exists in the Luci OpenWRT v18.06.2 web management interface, specifically within the /admin/system/packages (or /cgi-bin/luci/admin/system/packages) endpoint. The root cause is insufficient input sanitization , which allows an attacker to brea...
CVE-2025-57389: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. This vulnerability was fixed in OpenWRT v19.07.0...
CVE-2025-57389
A reflected cross-site scripting XSS vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. This vulnerability was fixed in OpenWRT v19.07.0...