119 matches found
PT-2026-26633
Name of the Vulnerable Software and Affected Versions QHora versions prior to 2.6.3.009 Description An issue exists in QHora where an improper restriction of communication channels to intended endpoints can allow an attacker with physical access to gain elevated privileges. The issue was exploite...
PT-2026-26634
Name of the Vulnerable Software and Affected Versions QHora versions prior to 2.6.2.007 Description A weak authentication issue exists in QHora. An attacker with local network access can exploit this to obtain sensitive information. Recommendations Update to version 2.6.2.007 or later...
CVE-2025-62845: Improper Neutralization of Escape, Meta, or Control Sequences
An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit the vulnerability to cause unexpected behavior. We have already fixed the vulnerability in the following...
CVE-2025-62843: Improper Restriction of Communication Channel to Intended Endpoints
An improper restriction of communication channel to intended endpoints vulnerability has been reported to affect QHora. If an attacker gains physical access, they can then exploit the vulnerability to gain the privileges that were intended for the original endpoint. We have already fixed the...
EUVD-2024-43181
Malicious code in bioql PyPI...
EUVD-2024-45185
Malicious code in bioql PyPI...
EUVD-2024-54248
Malicious code in bioql PyPI...
EUVD-2024-54221
Malicious code in bioql PyPI...
EUVD-2025-27754
Malicious code in bioql PyPI...
EUVD-2024-54651
Malicious code in bioql PyPI...
EUVD-2024-54652
Malicious code in bioql PyPI...
EUVD-2024-43182
Malicious code in bioql PyPI...
CVE-2025-29887
A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.5.1.060 and later...
CVE-2025-29887
A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.5.1.060 and later...
CVE-2025-29887
A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.5.1.060 and later...
CVE-2025-29887 QuRouter 2.5
A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.5.1.060 and later...
CVE-2025-29887 QuRouter 2.5
A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.5.1.060 and later...
CVE-2025-29887
The CVE-2025-29887 entry describes a command injection vulnerability in QuRouter 2.5.1 . If an attacker gains an administrator account , they can exploit the flaw to execute arbitrary commands with high impact. Public metrics indicate a HIGH severity (CVSS v3.1: 7.2, Confidentiality/Integrity/Ava...
QNAP Systems QuRouter security vulnerabilities
QNAP Systems QuRouter is a router management system from China Weilian Technology QNAP Systems. A security vulnerability exists in QNAP Systems QuRouter version 2.5.1 that originates from command injection and could lead to the execution of arbitrary commands...
PT-2025-35261
Name of the Vulnerable Software and Affected Versions: QuRouter version 2.5.1 Description: A command injection vulnerability exists in QuRouter. A remote attacker gaining administrator account access can exploit this issue to execute arbitrary commands. Recommendations: Update to QuRouter version...