EUVD-2024-54605

Malicious code in bioql PyPI...

EUVD-2024-39594

Malicious code in bioql PyPI...

EUVD-2025-22544

Malicious code in bioql PyPI...

EUVD-2022-0359

Malicious code in bioql PyPI...

EUVD-2022-1175

Malicious code in bioql PyPI...

EUVD-2025-3537

Malicious code in bioql PyPI...

EUVD-2023-45264

Malicious code in bioql PyPI...

EUVD-2022-38154

Malicious code in bioql PyPI...

EUVD-2023-40552

Malicious code in bioql PyPI...

Denial of Service in CivetWeb

...

CVE-2025-61188

Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This vulnerability allows attackers to upload files with system-whitelisted extensions to the system directory /opt, instead of the /opt/upFiles directory specified by the web server...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the validLogFileName and validExecOutputFileName functions, which insufficiently validate log file names, allowing traversal sequences after certain prefixes. An attacker can access sensitive files on the host...

PT-2025-40652

CVE-2025-61851 - Apache HTTP Server SQL Injection CVE ID : CVE-2025-61851 Published : Oct. 2, 2025, 3:15 a.m. | 1 hour, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2025-40441

CVE-2025-61714 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-61714 Published : Oct. 1, 2025, 3:15 a.m. | 2 hours, 24 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2025-40445

CVE-2025-61718 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2025-61718 Published : Oct. 1, 2025, 3:15 a.m. | 2 hours, 24 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

CVE-2025-61188

Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This vulnerability allows attackers to upload files with system-whitelisted extensions to the system directory /opt, instead of the /opt/upFiles directory specified by the web server...

Improper Authentication

esphome is vulnerable to improper authentication. The vulnerability is due to the webserver authentication check incorrectly passing when the client-supplied base64-encoded Authorization value is empty or a substring of the correct value, which allows an attacker to gain unauthorized access to...

CVE-2025-11155

The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is not considered a strong cipher, an attacker could intercept the web request handling the login and obtain the credentials...

PT-2025-41205

Name of the Vulnerable Software and Affected Versions Tenda CH22 versions prior to 1.0.0.1 Description A security issue exists in Tenda CH22. The formWrlsafeset function within the /goform/AdvSetWrlsafeset file, part of the HTTP Request Handler component, is susceptible to a stack-based buffer...

WordPress Plugin AR For WordPress Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress plugin AR For WordPress, whi...