EUVD-2018-0219

Malicious code in bioql PyPI...

EUVD-2022-40031

Malicious code in bioql PyPI...

EUVD-2025-21594

Malicious code in bioql PyPI...

EUVD-2023-33992

Malicious code in bioql PyPI...

EUVD-2022-32013

Malicious code in bioql PyPI...

EUVD-2025-21332

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2023-5182

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Sensitive data could be exposed in logs of subiquity version 23.09.1 and earlier. An attacker in the adm group could use this information to find hashed passwor...

CVE-2025-50757

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the setsysadm function via the username parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2024-48705

Wavlink AC1200 with firmware versions M32A3V1410230602 and M32A3V1410240222 are vulnerable to a post-authentication command injection while resetting the password. This vulnerability is specifically found within the "setsysadm" function of the "adm.cgi" binary, and is due to improper santization ...

PT-2025-35571

Name of the Vulnerable Software and Affected Versions: Wavlink WN535K3 version 20191010 Description: A command injection vulnerability exists in the set sys adm function of the Wavlink WN535K3 router. The vulnerability is triggered through manipulation of the username parameter, allowing attacker...

CVE-2025-50757

Wavlink WN535K3 (version 20191010) is affected by a command-injection vulnerability in the set_sys_adm function triggered via the username parameter. The flaw enables attackers to execute arbitrary commands through a crafted request. CVSSv3.1 base score is 6.5 (Network, Low attack complexity, No ...

CVE-2025-50757

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the setsysadm function via the username parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...

CVE-2025-9358

CVE-2025-9358 affects Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 (firmware ranges listed in sources). The root cause is a stack-based buffer overflow in the setSysAdm function located in /goform/setSysAdm, triggered by manipulation of the admpasshint argument. This allows remote ex...

MAL-2025-9726 Malicious code in @zalastax/nolb-_adm (npm)

The package @zalastax/nolb-adm was found to contain malicious code...

CVE-2025-7699

An improper access control vulnerability was found in the EZ Sync Manager of ADM, which allows authenticated users to copy arbitrary files from the server file system into their own EZSync folder. The vulnerability is due to a lack of authorization checks on the file parameter of the HTTP request...

CVE-2025-7618

A stored Cross-Site Scripting XSS vulnerability vulnerability was found in the File Explorer and Text Editor of ADM. An attacker could exploit this vulnerability to inject malicious scripts into the applications, which may then access cookies or other sensitive information retained by the browser...

CVE-2025-7699

An improper access control vulnerability was found in the EZ Sync Manager of ADM, which allows authenticated users to copy arbitrary files from the server file system into their own EZSync folder. The vulnerability is due to a lack of authorization checks on the file parameter of the HTTP request...

CVE-2025-7699 An improper access control vulnerability was found in the EZ Sync Manager of ADM

An improper access control vulnerability was found in the EZ Sync Manager of ADM, which allows authenticated users to copy arbitrary files from the server file system into their own EZSync folder. The vulnerability is due to a lack of authorization checks on the file parameter of the HTTP request...

CVE-2025-7699 An improper access control vulnerability was found in the EZ Sync Manager of ADM

An improper access control vulnerability was found in the EZ Sync Manager of ADM, which allows authenticated users to copy arbitrary files from the server file system into their own EZSync folder. The vulnerability is due to a lack of authorization checks on the file parameter of the HTTP request...

CVE-2025-7380

A stored Cross-Site Scripting XSS vulnerability exists in the Access Control of ADM, the issue allows an attacker to inject malicious scripts into the folder name field while creating a new shared folder. These scripts are not properly sanitized and will be executed when the folder name is...