EUVD-2001-0951

Malware in sbrugna...

EUVD-2002-0846

Malware in sbrugna...

EUVD-1999-0140

Malware in sbrugna...

CVE-2025-11295

A flaw has been found in Belkin F9K1015 1.00.10. This affects an unknown part of the file /goform/formPPPoESetup. This manipulation of the argument pppUserName causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was...

EUVD-2022-29385

Malicious code in bioql PyPI...

EUVD-2025-24352

Malicious code in bioql PyPI...

EUVD-2022-40572

Malicious code in bioql PyPI...

EUVD-2022-35404

Malicious code in bioql PyPI...

EUVD-2022-27189

Malicious code in bioql PyPI...

EUVD-2023-27507

Malicious code in bioql PyPI...

EUVD-2023-25849

Malicious code in bioql PyPI...

EUVD-2023-27504

Malicious code in bioql PyPI...

EUVD-2022-44289

Malicious code in bioql PyPI...

EUVD-2022-36677

Malicious code in bioql PyPI...

EUVD-2023-31932

Malicious code in bioql PyPI...

CVE-2025-34182

In Deciso OPNsense before 25.7.4, when creating an "Interfaces: Devices: Point-to-Point" entry, the value of the parameter ptpid is not sanitized of HTML-related characters/strings. This value is directly displayed when visiting the page/interfacesassign.php, which can result in stored cross-site...

CVE-2025-34182

In Deciso OPNsense before 25.7.4, when creating an "Interfaces: Devices: Point-to-Point" entry, the value of the parameter ptpid is not sanitized of HTML-related characters/strings. This value is directly displayed when visiting the page/interfacesassign.php, which can result in stored cross-site...

CVE-2025-34182 Deciso OPNsense < 25.7.4 /interfaces_ppps_edit.php ptpid Stored XSS

In Deciso OPNsense before 25.7.4, when creating an "Interfaces: Devices: Point-to-Point" entry, the value of the parameter ptpid is not sanitized of HTML-related characters/strings. This value is directly displayed when visiting the page/interfacesassign.php, which can result in stored cross-site...

CVE-2025-34182

Deciso OPNsense before 25.7.4 is affected by a stored XSS vulnerability in the ptpid parameter used when creating Interfaces: Devices: Point-to-Point entries. The value isn’t sanitized of HTML-related characters/strings and is echoed on interfaces_assign.php, enabling stored XSS. An attacker must...

CVE-2025-34182

In Deciso OPNsense before 25.7.4, when creating an "Interfaces: Devices: Point-to-Point" entry, the value of the parameter ptpid is not sanitized of HTML-related characters/strings. This value is directly displayed when visiting the page/interfacesassign.php, which can result in stored cross-site...