EUVD-2022-39839

Malicious code in bioql PyPI...

EUVD-2024-29305

Malicious code in bioql PyPI...

EUVD-2022-1023

Malicious code in bioql PyPI...

EUVD-2023-54670

Malicious code in bioql PyPI...

EUVD-2023-29054

Malicious code in bioql PyPI...

EUVD-2024-54605

Malicious code in bioql PyPI...

EUVD-2024-2877

Malicious code in bioql PyPI...

EUVD-2022-24508

Malicious code in bioql PyPI...

EUVD-2023-1665

Malicious code in bioql PyPI...

EUVD-2021-28413

Malicious code in bioql PyPI...

EUVD-2023-40914

Malicious code in bioql PyPI...

EUVD-2025-17634

Malicious code in bioql PyPI...

EUVD-2025-11347

Malicious code in bioql PyPI...

CVE-2025-11120

A weakness has been identified in Tenda AC8 16.03.34.06. The affected element is the function formSetServerConfig of the file /goform/SetServerConfig. Executing manipulation can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been made available to the publi...

CVE-2025-11155 WEAK ENCODING FOR PASSWORD IN DEVICE SERVER CONFIGURATION

The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is not considered a strong cipher, an attacker could intercept the web request handling the login and obtain the credentials...

Tenda AC8 formSetServerConfig function buffer overflow vulnerability

Tenda AC8 is a dual gigabit wireless router from Tenda designed for fiber optic homes up to 1000 megabytes, supporting IPv6 protocol with intelligent network management. The Tenda AC8 suffers from a buffer overflow vulnerability that originates from the formSetServerConfig function in the...

Tenda AC8 安全漏洞

Tenda AC8 is a dual gigabit wireless router from Tenda designed for fiber optic homes up to 1000 megabytes, supporting IPv6 protocol with intelligent network management. The Tenda AC8 suffers from a buffer overflow vulnerability that originates from the formSetServerConfig function in the...

CVE-2025-59528 Flowise has Remote Code Execution vulnerability

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses the user-provided...

CVE-2025-59528 Flowise has Remote Code Execution vulnerability

Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses the user-provided...

PT-2025-38723

Name of the Vulnerable Software and Affected Versions Tenda AC23 versions up to 16.03.07.52 Description A buffer overflow issue exists in the HTTP POST Request Handler component of Tenda AC23. The issue is due to the manipulation of the startIp argument within the sscanf function located in the...