EUVD-2025-27379

Malicious code in bioql PyPI...

EUVD-2022-39805

Malicious code in bioql PyPI...

EUVD-2024-50885

Malicious code in bioql PyPI...

EUVD-2025-5506

Malicious code in bioql PyPI...

EUVD-2025-6627

Malicious code in bioql PyPI...

EUVD-2024-31673

Malicious code in bioql PyPI...

EUVD-2023-42841

Malicious code in bioql PyPI...

EUVD-2023-57638

Malicious code in bioql PyPI...

EUVD-2022-31810

Malicious code in bioql PyPI...

EUVD-2025-24665

Malicious code in bioql PyPI...

EUVD-2022-30068

Malicious code in bioql PyPI...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an unverified user configuration parameter that could lead to a divide-by-zero error...

CVE-2025-3193

Versions of the package algoliasearch-helper from 2.0.0-rc1 and before 3.11.2 are vulnerable to Prototype Pollution in the merge function in merge.js, which allows constructor.prototype to be written even though doing so throws an error. In the "extreme edge-case" that the resulting error is...

CVE-2025-48868 Horilla vulnerable to authenticated RCE via eval() in project_bulk_archive

Horilla is a free and open source Human Resource Management System HRMS. An authenticated Remote Code Execution RCE vulnerability exists in Horilla 1.3.0 due to the unsafe use of Python’s eval function on a user-controlled query parameter in the projectbulkarchive view. This allows privileged use...

PT-2025-39198

Name of the Vulnerable Software and Affected Versions Tenda AC9 version 1.0 Description A command injection issue exists in Tenda AC9 version 1.0. The issue is due to a flaw in the formSetSambaConf function within the httpd file, specifically through the usb.samba.guest.user parameter. This allow...

CVE-2025-57069

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the pPppUser parameter in the getsinglepppuser function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

Tenda G3 getsinglepppuser function buffer overflow vulnerability

Tenda G3 is a micro-enterprise all-in-one gateway from Tenda, designed for small and medium-sized businesses to provide an integrated network solution. Tenda G3 has a buffer overflow vulnerability, the vulnerability stems from the pPppUser parameter in the getsinglepppuser function fails to...

CVE-2025-57069

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the pPppUser parameter in the getsinglepppuser function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-57069

CVE-2025-57069 affects Tenda G3 (v3.0br_V15.11.0.17). Public sources describe a stack overflow in the getsinglepppuser function caused by the pPppUser parameter, enabling DoS via a crafted request. The issue is documented across multiple feeds (NVD, Red Hat, CNVD, CNVD, etc.) with no clearly publ...

CVE-2025-57069

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the pPppUser parameter in the getsinglepppuser function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...