EUVD-2022-38786

Malicious code in bioql PyPI...

CVE-2024-47259

Girishunawane, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi did not have a sufficient input validation allowing for a possible command injection leading to being able to transfer files to the Axis device with the purpose to exhaust system resources. Ax...

PT-2024-25795 · Tenda · Tenda O3V2

Name of the Vulnerable Software and Affected Versions: Tenda O3V2 versions V1.0.0.10 through V1.0.0.12 Description: The issue is related to a Blind Command Injection via the dest parameter in the "/goform/getTraceroute" API endpoint. This allows attackers to execute arbitrary commands with root...