4259 matches found
CVE-2025-11292
CVE-2025-11292 affects Belkin F9K1015 firmware v1.00.10. The vulnerability is in an unknown function of /goform/formBSSetSitesurvey where manipulating the wan_ipaddr parameter enables remote command injection. The issue is exploitable over the network, with a publicly available exploit, and vendo...
EUVD-2025-32449
A vulnerability was found in samanhappy MCPHub up to 0.9.10. Affected by this issue is some unknown functionality of the file src/controllers/serverController.ts. The manipulation of the argument command/args results in os command injection. The attack can be launched remotely. The exploit has be...
CVE-2025-11285
A vulnerability was found in samanhappy MCPHub up to 0.9.10. Affected by this issue is some unknown functionality of the file src/controllers/serverController.ts. The manipulation of the argument command/args results in os command injection. The attack can be launched remotely. The exploit has be...
CVE-2025-11285 samanhappy MCPHub serverController.ts os command injection
A vulnerability was found in samanhappy MCPHub up to 0.9.10. Affected by this issue is some unknown functionality of the file src/controllers/serverController.ts. The manipulation of the argument command/args results in os command injection. The attack can be launched remotely. The exploit has be...
CVE-2025-11285
SAMANHAPPY MCPHub up to 0.9.10 contains a command injection in src/controllers/serverController.ts caused by improper handling of the command/args input. An attacker can remotely trigger arbitrary OS commands; the exploit has been publicly released. No fixed version is available for remediation; ...
CVE-2025-11285 samanhappy MCPHub serverController.ts os command injection
A vulnerability was found in samanhappy MCPHub up to 0.9.10. Affected by this issue is some unknown functionality of the file src/controllers/serverController.ts. The manipulation of the argument command/args results in os command injection. The attack can be launched remotely. The exploit has be...
CVE-2025-11285 samanhappy MCPHub serverController.ts os command injection
A vulnerability was found in samanhappy MCPHub up to 0.9.10. Affected by this issue is some unknown functionality of the file src/controllers/serverController.ts. The manipulation of the argument command/args results in os command injection. The attack can be launched remotely. The exploit has be...
CVE-2025-11298: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in Belkin F9K1015 1.00.10. Impacted is an unknown function of the file /goform/formSetWanStatic. Executing a manipulation of the argument mwanipaddr can lead to command injection. The attack may be performed from remote. The exploit has been publicly disclosed and m...
CVE-2025-11292: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/formBSSetSitesurvey. Executing a manipulation of the argument wanipaddr can lead to command injection. The attack can be launched remotely. The exploit has been made available to the publ...
PT-2025-40796
Name of the Vulnerable Software and Affected Versions samanhappy MCPHub versions up to 0.9.10 Description A flaw exists in samanhappy MCPHub that allows for remote operating system command injection. The issue is related to the manipulation of the command/args argument within the file...
EUVD-2025-31452
Malicious code in bioql PyPI...
EUVD-2025-31493
Malicious code in bioql PyPI...
EUVD-2025-24663
Malicious code in bioql PyPI...
EUVD-2023-23706
Malicious code in bioql PyPI...
EUVD-2025-24048
Malicious code in bioql PyPI...
EUVD-2025-31453
Malicious code in bioql PyPI...
EUVD-2025-24120
Malicious code in bioql PyPI...
EUVD-2025-26162
Malicious code in bioql PyPI...