33753 matches found
ROS-20251006-10
A vulnerability in the permissions model of the Node.js software platform is related to flaws in the processing of HTTP requests. Exploitation of the vulnerability could allow a remote attacker to bypass existing security restrictions and send unauthorized requests. existing security restrictions...
EUVD-2025-32535
A stored cross-site scripting XSS vulnerability in Optimod 5950 - Optimod 5950HD - Optimod 5750 - Optimod 5750HD - Optimod Trio - Optimod version 1.0.0.33 - System version 2.5.26, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payloa...
PT-2025-40872
Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.196318 Description A weakness exists in Tenda AC18 version 15.03.05.196318. Manipulation of the wifi chkHz argument in the file '/goform/WifiMacFilterSet' can lead to a stack-based buffer overflow. This issue can be...
ROS-20251006-15
A vulnerability in a library that provides basic functionality for data serialization and deserialization Jackson Core, is related to the fact that when parsing JSON from an array of bytes with offset and length, an exception message is erroneously read from the beginning of the array. exception...
CVE-2025-11298
A vulnerability was determined in Belkin F9K1015 1.00.10. Impacted is an unknown function of the file /goform/formSetWanStatic. Executing a manipulation of the argument mwanipaddr can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and m...
CVE-2025-11292 Belkin F9K1015 formBSSetSitesurvey command injection
A weakness has been identified in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/formBSSetSitesurvey. Executing a manipulation of the argument wanipaddr can lead to command injection. The attack can be launched remotely. The exploit has been made available to the publ...
CVE-2025-11281 Frappe LMS Unpublished Course courses access control
A vulnerability has been found in Frappe LMS 2.35.0. The affected element is an unknown function of the file /courses/ of the component Unpublished Course Handler. Such manipulation leads to improper access controls. The attack may be launched remotely. This attack is characterized by high...
Cyber Warfare during Operation Sindoor: Malware Campaign Analysis and Detection Framework
Rapid digitization of critical infrastructure has made cyberwarfare one of the important dimensions of modern conflicts. Attacking the critical infrastructure is an attractive pre-emptive proposition for adversaries as it can be done remotely without crossing borders. Such attacks disturb the...
EUVD-2024-49357
Malicious code in bioql PyPI...
EUVD-2023-35342
Malicious code in bioql PyPI...
EUVD-2025-19181
Malicious code in bioql PyPI...
EUVD-2024-40320
Malicious code in bioql PyPI...
EUVD-2022-40639
Malicious code in bioql PyPI...
EUVD-2025-4475
Malicious code in bioql PyPI...
EUVD-2022-3317
Malicious code in bioql PyPI...
EUVD-2025-16844
Malicious code in bioql PyPI...
EUVD-2024-33381
Malicious code in bioql PyPI...
EUVD-2024-48368
Malicious code in bioql PyPI...