EUVD-2022-31392

Malicious code in bioql PyPI...

EUVD-2023-53541

Malicious code in bioql PyPI...

EUVD-2025-22520

Malicious code in bioql PyPI...

EUVD-2023-52764

Malicious code in bioql PyPI...

EUVD-2023-51956

Malicious code in bioql PyPI...

EUVD-2024-0451

Malicious code in bioql PyPI...

EUVD-2023-53770

Malicious code in bioql PyPI...

EUVD-2022-33806

Malicious code in bioql PyPI...

EUVD-2024-0299

Malicious code in bioql PyPI...

EUVD-2022-37604

Malicious code in bioql PyPI...

EUVD-2023-1451

Malicious code in bioql PyPI...

EUVD-2022-33154

Malicious code in bioql PyPI...

EUVD-2025-22534

Malicious code in bioql PyPI...

EUVD-2022-1605

Malicious code in bioql PyPI...

WWBN, MedDream, Eclipse vulnerabilities

Cisco Talos' Vulnerability Discovery & Research team recently disclosed seven vulnerabilities in WWBN AVideo, four in MedDream, and one in an Eclipse ThreadX module. The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco 's...

CVE-2025-41420

A cross-site scripting xss vulnerability exists in the userLogin cancelUri parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this...

CVE-2025-46410

A cross-site scripting xss vulnerability exists in the managerPlaylists PlaylistOwnerUsersId parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to...

CVE-2025-50128

A cross-site scripting xss vulnerability exists in the videoNotFound 404ErrorMsg parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigger this...

CVE-2025-36548

A cross-site scripting xss vulnerability exists in the LoginWordPress loginForm cancelUri parameter functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A specially crafted HTTP request can lead to arbitrary Javascript execution. An attacker can get a user to visit a webpage to trigg...

CVE-2025-25214

A race condition vulnerability exists in the aVideoEncoder.json.php unzip functionality of WWBN AVideo 14.4 and dev master commit 8a8954ff. A series of specially crafted HTTP request can lead to arbitrary code execution...