EUVD-2025-31388

Malicious code in bioql PyPI...

EUVD-2025-24799

Malicious code in bioql PyPI...

EUVD-2023-26876

Malicious code in bioql PyPI...

EUVD-2022-28612

Malicious code in bioql PyPI...

EUVD-2025-28385

Malicious code in bioql PyPI...

EUVD-2025-28869

Malicious code in bioql PyPI...

EUVD-2023-58546

Malicious code in bioql PyPI...

EUVD-2025-25139

Malicious code in bioql PyPI...

EUVD-2023-23706

Malicious code in bioql PyPI...

EUVD-2025-25398

Malicious code in bioql PyPI...

EUVD-2025-24100

Malicious code in bioql PyPI...

EUVD-2024-33111

Malicious code in bioql PyPI...

EUVD-2021-29830

Malicious code in bioql PyPI...

CISA Flags Meteobridge CVE-2025-4008 Flaw as Actively Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a high-severity security flaw impacting Smartbedded Meteobridge to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, CVE-2025-4008 CVSS score: 8.7, is a case ...

CVE-2025-11138

A vulnerability was found in mirweiye wenkucms up to 3.4. This impacts the function createPathOne of the file app/common/common.php. The manipulation results in os command injection. The attack may be launched remotely. The exploit has been made public and could be used...

Exploit for OS Command Injection in Dell Unity_Operating_Environment

watchTowr-vs-Dell-UnityVSA-CVE-2025-36604 Detection Artifact...

CVE-2025-11073

A vulnerability was detected in Keyfactor RG-EW5100BE EW3.0B11P280EW5100BE-PRO12183019. The affected element is an unknown function of the file /cgi-bin/luci/api/cmd of the component HTTP POST Request Handler. The manipulation of the argument url results in command injection. The attack can be...

CVE-2025-11100

A vulnerability was identified in D-Link DIR-823X 250416. This affects the function uciset of the file /goform/setwifiblacklists. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used...

CVE-2025-11099

A vulnerability was determined in D-Link DIR-823X 250416. The impacted element is the function ucidel of the file /goform/deleteprohibiting. This manipulation of the argument delvalue causes command injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed...

CVE-2025-11098

A vulnerability was found in D-Link DIR-823X 250416. The affected element is an unknown function of the file /goform/setwifiblacklists. The manipulation of the argument macList results in command injection. The attack may be performed from remote. The exploit has been made public and could be use...