EUVD-2024-34375

Malicious code in bioql PyPI...

EUVD-2024-17457

Malicious code in bioql PyPI...

EUVD-2023-35336

Malicious code in bioql PyPI...

EUVD-2022-31984

Malicious code in bioql PyPI...

EUVD-2024-52663

Malicious code in bioql PyPI...

EUVD-2022-46145

Malicious code in bioql PyPI...

EUVD-2022-3667

Malicious code in bioql PyPI...

EUVD-2024-35230

Malicious code in bioql PyPI...

CVE-2024-25825

FydeOS for PC 17.1 R114, FydeOS for VMware 17.0 R114, FydeOS for You 17.1 R114, and OpenFyde R114 were discovered to be configured with the root password saved as a wildcard. This allows attackers to gain root access without a password...

CVE-2024-42638

H3C Magic B1ST v100R012 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root...

CVE-2023-49228

An issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses hard-coded credentials, which allows an attacker with physical access and sufficient knowledge to execute arbitrary commands as root...

CVE-2022-36616

TOTOLINK A810R V4.1.2cu.5182B20201026 and V5.9c.4050B20190424 was discovered to contain a hardcoded password for root at /etc/shadow.sample...

CVE-2022-32535

The Bosch Ethernet switch PRA-ES8P2S with software version 1.01.05 runs its web server with root privilege. In combination with CVE-2022-23534 this could give an attacker root access to the switch...

CVE-2020-35184

The official composer docker images before 1.8.3 contain a blank password for a root user. System using the composer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35185

The official ghost docker images before 2.16.1-alpine Alpine specific contain a blank password for a root user. System using the ghost docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

CVE-2019-13476

In CentOS-WebPanel.com aka CWP CentOS Web Panel 0.9.8.837, XSS in the domain parameter allows a low-privilege user to achieve root access via the email list page...

CVE-2019-19014

An issue was discovered in TitanHQ WebTitan before 5.18. It has a sudoers file that enables low-privilege users to execute a vast number of commands as root, including mv, chown, and chmod. This can be trivially exploited to gain root privileges by an attacker with access...

CVE-1999-0246

HP Remote Watch allows a remote user to gain root access...

CVE-2025-28201

An issue in Victure RX1800 ENV1.0.0r12110933 allows physically proximate attackers to execute arbitrary code or gain root access...

CVE-2025-28201

CVE-2025-28201 affects Victure RX1800 router (EN_V1.0.0_r12_110933). Multiple sources state physically proximate attackers can execute arbitrary code or gain root access. CVSSv3.1: AV=P/AC=L/PR=N/UI=N/S=U/C=H/I=H/A=H; confidentiality, integrity, and availability are all High. No patch/fix informa...