EUVD-2023-39721

Malicious code in bioql PyPI...

EUVD-2022-50605

Malicious code in bioql PyPI...

EUVD-2022-38752

Malicious code in bioql PyPI...

EUVD-2023-30997

Malicious code in bioql PyPI...

EUVD-2025-9056

Malicious code in bioql PyPI...

EUVD-2025-10166

Malicious code in bioql PyPI...

EUVD-2025-20588

Malicious code in bioql PyPI...

EUVD-2023-36287

Malicious code in bioql PyPI...

EUVD-2025-6460

Malicious code in bioql PyPI...

EUVD-2025-20586

Malicious code in bioql PyPI...

EUVD-2021-32369

Malicious code in bioql PyPI...

PT-2025-40531

Name of the Vulnerable Software and Affected Versions TCL 65C655 Smart TV version V8-R75PT01-LF1V269.001116 Description The TCL 65C655 Smart TV is susceptible to a Server-Side Request Forgery SSRF issue. This affects the UPnP MediaRenderer service AVTransport:1, which accepts unauthenticated...

PT-2025-40532

Name of the Vulnerable Software and Affected Versions TCL Smart TV affected versions not specified Description A TCL Smart TV with a vulnerable UPnP/DLNA MediaRenderer implementation is subject to a remote, unauthenticated Denial of Service DoS condition. An attacker can send a flood of malformed...

CVE-2025-55971: Server-Side Request Forgery (SSRF)

TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 Android TV, Kernel 5.4.242+, is vulnerable to a blind, unauthenticated Server-Side Request Forgery SSRF vulnerability via the UPnP MediaRenderer service AVTransport:1. The device accepts unauthenticated SetAVTransportURI SOAP...

CVE-2025-55972: Uncontrolled Resource Consumption

A TCL Smart TV running a vulnerable UPnP/DLNA MediaRenderer implementation is affected by a remote, unauthenticated Denial of Service DoS condition. By sending a flood of malformed or oversized SetAVTransportURI SOAP requests to the UPnP control endpoint, an attacker can cause the device to becom...

TCL 65C655 Smart TV 安全漏洞

TCL 65C655 Smart TV is a Smart TV from TCL Corporation of China. A security vulnerability exists in TCL 65C655 Smart TV version V8-R75PT01-LF1V269.001116, which originates when the UPnP MediaRenderer service accepts unauthenticated SetAVTransportURI SOAP requests, which could lead to a server-sid...

Linux Distros Unpatched Vulnerability : CVE-2020-19858

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Platinum Upnp SDK through 1.2.0 has a directory traversal vulnerability. The attack could remote attack victim by sending http://ip:port/../privacy.avi URL to...

CVE-2025-44178: Improper Access Control

DASAN GPON ONU H660WM H660WMR210825 is susceptible to improper access control under its default settings. Attackers can exploit this vulnerability to gain unauthorized access to sensitive information and modify its configuration via the UPnP protocol WAN sides without any authentication...

The vulnerability of the upnp_ctrl_asp() function in the JHTTPD web server of the D-Link DI-8100 router’s microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the upnpctrlasp function in the JHTTPD web server of the D-Link DI-8100 microprogrammed router software is related to the execution of operations outside the buffer in memory when processing the removeextproto and removeextport parameters. Exploitation of this vulnerability...

D-Link DI-8100 Buffer Overflow Vulnerability (CNVD-2025-16668)

The D-Link DI-8100 is an enterprise-class router device from D-Link. A buffer overflow vulnerability exists in the D-Link DI-8100 version 1.0, which originates from the improper handling of the parameters removeextproto/removeextport by the sprintf function in the /upnpctrl.asp file of the...