EUVD-2022-52455

Malicious code in bioql PyPI...

EUVD-2022-36776

Malicious code in bioql PyPI...

EUVD-2025-10027

Malicious code in bioql PyPI...

EUVD-2025-25635

Malicious code in bioql PyPI...

EUVD-2025-8763

Malicious code in bioql PyPI...

EUVD-2021-32178

Malicious code in bioql PyPI...

EUVD-2023-27140

Malicious code in bioql PyPI...

EUVD-2022-5793

Malicious code in bioql PyPI...

EUVD-2022-42713

Malicious code in bioql PyPI...

EUVD-2023-12106

Malicious code in bioql PyPI...

EUVD-2022-6735

Malicious code in bioql PyPI...

EUVD-2021-28014

Malicious code in bioql PyPI...

EUVD-2022-50491

Malicious code in bioql PyPI...

EUVD-2022-31102

Malicious code in bioql PyPI...

EUVD-2022-36161

Malicious code in bioql PyPI...

CVE-2025-56162

YOSHOP 2.0 suffers from an unauthenticated SQL injection in the goodsIds parameter of the /api/goods/listByIds endpoint. The getListByIds function concatenates user input into orderRaw'fieldgoodsid, ...', allowing attackers to: a enumerate or modify database data, including dumping admin password...

CVE-2025-34210

The CVE concerns Vasion Print (formerly PrinterLogic) Virtual Appliance Host and Application (VA/SAAS deployments). The connected sources confirm that sensitive credentials (database passwords, MySQL root password, SaaS keys, Portainer admin password, etc.) are stored in cleartext files that are ...

Use Of Default Credentials

github.com/neuvector/neuvector is vulnerable to Use of Default Credentials. The vulnerability is due to hardcoded default password due to the use of a fixed string as the default admin password, which can be exploited if not changed immediately after deployment, allowing attackers with network...

CVE-2025-56241

Aztech DSL5005EN firmware 1.00.AZ2013-05-10 and possibly other versions allows unauthenticated attackers to change the administrator password via a crafted POST request to sysAccess.asp. This allows full administrative control of the router without authentication...

CVE-2025-56241

Aztech DSL5005EN firmware 1.00.AZ2013-05-10 and possibly other versions allows unauthenticated attackers to change the administrator password via a crafted POST request to sysAccess.asp. This allows full administrative control of the router without authentication...