EUVD-2023-38355

Malicious code in bioql PyPI...

EUVD-2022-1622

Malicious code in bioql PyPI...

EUVD-2023-45717

Malicious code in bioql PyPI...

EUVD-2023-45707

Malicious code in bioql PyPI...

EUVD-2022-5771

Malicious code in bioql PyPI...

EUVD-2024-50787

Malicious code in bioql PyPI...

EUVD-2024-50788

Malicious code in bioql PyPI...

EUVD-2021-6829

Malicious code in bioql PyPI...

EUVD-2023-45708

Malicious code in bioql PyPI...

EUVD-2022-37757

Malicious code in bioql PyPI...

EUVD-2023-31588

Malicious code in bioql PyPI...

CVE-2025-55971

TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, is vulnerable to a blind, unauthenticated Server-Side Request Forgery SSRF vulnerability via the UPnP MediaRenderer service AVTransport:1. The device accepts unauthenticated SetAVTransportURI SOAP...

TCL 65C655 Smart TV has security vulnerabilities

TCL 65C655 Smart TV is a Smart TV from TCL Corporation of China. A security vulnerability exists in the TCL 65C655 Smart TV, which stems from the UPnP control endpoint being susceptible to a malformed or oversized SOAP request attack, which could result in a denial of service...

CVE-2025-55972: Uncontrolled Resource Consumption

A TCL Smart TV running a vulnerable UPnP/DLNA MediaRenderer implementation is affected by a remote, unauthenticated Denial of Service DoS condition. By sending a flood of malformed or oversized SetAVTransportURI SOAP requests to the UPnP control endpoint, an attacker can cause the device to becom...

CVE-2025-1862

An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user-supplied filenames in the BPEL uploader SOAP service endpoint. A malicious actor with administrative privileges can upload arbitrary files to a user-controlled location on the server. By...

CVE-2025-1862 Authenticated Arbitrary File Upload in Multiple WSO2 Products via BPEL Uploader SOAP Service Leading to Remote Code Execution

An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user-supplied filenames in the BPEL uploader SOAP service endpoint. A malicious actor with administrative privileges can upload arbitrary files to a user-controlled location on the server. By...

CVE-2025-1862 Authenticated Arbitrary File Upload in Multiple WSO2 Products via BPEL Uploader SOAP Service Leading to Remote Code Execution

An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user-supplied filenames in the BPEL uploader SOAP service endpoint. A malicious actor with administrative privileges can upload arbitrary files to a user-controlled location on the server. By...

CVE-2025-1862: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability exists in multiple WSO2 products due to improper validation of user-supplied filenames in the BPEL uploader SOAP service endpoint. A malicious actor with administrative privileges can upload arbitrary files to a user-controlled location on the server. By...

CVE-2025-10779

A vulnerability was found in D-Link DCS-935L up to 1.13.01. The impacted element is the function sub402280 of the file /HNAP1/. The manipulation of the argument HNAPAUTH/SOAPAction results in stack-based buffer overflow. The attack may be launched remotely. The exploit has been made public and...

miniIGD Component Code Execution

The vulnerability of the miniIGD component in the SOAP microprogramming system of the WRH-733GBK and WRH-733GWH routers is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...