18 matches found
EUVD-2025-23276
Malicious code in bioql PyPI...
EUVD-2022-47000
Malicious code in bioql PyPI...
CVE-2025-50475
An OS command injection vulnerability exists in Russound MBX-PRE-D67F firmware version 3.1.6, allowing unauthenticated attackers to execute arbitrary commands as root via crafted input to the hostname parameter in network configuration requests. This vulnerability stems from improper neutralizati...
CVE-2025-50475
An OS command injection vulnerability exists in Russound MBX-PRE-D67F firmware version 3.1.6, allowing unauthenticated attackers to execute arbitrary commands as root via crafted input to the hostname parameter in network configuration requests. This vulnerability stems from improper neutralizati...
Russound MBX-PRE-D67F 安全漏洞
Russound MBX-PRE-D67F is an audio streaming pre-amplifier from Russound USA. A security vulnerability exists in the Russound MBX-PRE-D67F version 3.1.6, which originates from OS command injection and could lead to the execution of arbitrary commands with root privileges...
PT-2025-31548 · Russound · Russound Mbx-Pre-D67F
Name of the Vulnerable Software and Affected Versions: Russound MBX-PRE-D67F version 3.1.6 Description: An OS command injection issue exists in the network configuration handler, allowing unauthenticated attackers to execute arbitrary commands as root. The vulnerability is due to improper...
CVE-2025-50475
An OS command injection vulnerability exists in Russound MBX-PRE-D67F firmware version 3.1.6, allowing unauthenticated attackers to execute arbitrary commands as root via crafted input to the hostname parameter in network configuration requests. This vulnerability stems from improper neutralizati...
CVE-2025-50475
An OS command injection vulnerability exists in Russound MBX-PRE-D67F firmware version 3.1.6, allowing unauthenticated attackers to execute arbitrary commands as root via crafted input to the hostname parameter in network configuration requests. This vulnerability stems from improper neutralizati...
CVE-2025-50475
The vulnerability CVE-2025-50475 affects Russound MBX-PRE-D67F firmware version 3.1.6. The issue is an OS command injection in the network configuration handler, exploitable via crafted input to the hostname parameter, allowing unauthenticated attackers to execute commands as root with high impac...
CVE-2022-44038
Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRunner.cgi component...
Russound XSourcePlayer Code Execution Vulnerability
XSourcePlayer is an audio player from Russound. A code execution vulnerability exists in Russound XSourcePlayer version 777D v06.08.03, which stems from a failure of the scriptRunner.cgi component to properly filter special elements of constructed snippets. An attacker can exploit the vulnerabili...
CVE-2022-44038
Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRunner.cgi component...
CVE-2022-44038
Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRunner.cgi component...
Remote code execution
Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRunner.cgi component...
Russound XSourcePlayer 安全漏洞
XSourcePlayer is an audio player from Russound. A code execution vulnerability exists in Russound XSourcePlayer version 777D v06.08.03, which stems from a failure of the scriptRunner.cgi component to properly filter special elements of constructed snippets. An attacker can exploit the vulnerabili...
CVE-2022-44038
The CVE-2022-44038 entry concerns Russound XSourcePlayer 777D, version 06.08.03, with a vulnerability in the scriptRunner.cgi component. Root cause: failure to properly filter certain elements in constructed snippets, enabling remote code execution. Impact: high across confidentiality, integrity,...
CVE-2022-44038
Russound XSourcePlayer 777D v06.08.03 was discovered to contain a remote code execution vulnerability via the scriptRunner.cgi component...
PT-2022-27087 · Russound · Russound Xsourceplayer 777D
Name of the Vulnerable Software and Affected Versions: Russound XSourcePlayer 777D version 06.08.03 Description: The issue is related to a remote code execution vulnerability via the scriptRunner.cgi component. Recommendations: For Russound XSourcePlayer 777D version 06.08.03, consider disabling...