112 matches found
EUVD-2021-22990
Malware in sbrugna...
EUVD-2008-3311
Malware in sbrugna...
EUVD-2025-24943
Malicious code in bioql PyPI...
EUVD-2023-24749
Malicious code in bioql PyPI...
EUVD-2023-32484
Malicious code in bioql PyPI...
EUVD-2024-29237
Malicious code in bioql PyPI...
EUVD-2024-24483
Malicious code in bioql PyPI...
The vulnerability of the checkUploadFile function in the Tenda G1 router microprogramming software allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the checkUploadFile function in the Tenda G1 router microprogramming software is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause service failures...
The vulnerability of the FirmwareUpgrade function in D-Link DIR‑619L router microprogramming system allows a hacker to bypass the authentication process.
The vulnerability of the FirmwareUpgrade function in D-Link DIR‑619L router microprogramming software is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to bypass authentication procedures remotely...
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to insufficient verification of data authenticity, allowing attackers to trigger service failures.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to insufficient verification of data authenticity. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...
PT-2025-34552 · Belkin · Belkin Ax1800
Name of the Vulnerable Software and Affected Versions: Belkin AX1800 version 1.1.00.016 Description: A vulnerability exists due to insufficient verification of data authenticity within the Firmware Update Handler component. This issue can be exploited remotely. The vendor was contacted regarding...
CVE-2025-8978
A vulnerability was determined in D-Link DIR-619L 6.02CN02. Affected is the function FirmwareUpgrade of the component boa. The manipulation leads to insufficient verification of data authenticity. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...
Protect Client-Side Code and Certify the Authenticity of Data Collection
...
The vulnerability of the software for configuring and setting up devices of the Universal Relay (UR) series, GE Vernova Enervista UR Setup, stems from the lack of authenticity verification for a critical function. This allows attackers to carry out “man-in-the-middle” type attacks.
The vulnerability of the software for configuring and setting up Universal Relay UR devices from GE Vernova Enervista UR Setup is related to the lack of authenticity verification for a critical function. Exploiting this vulnerability allows an attacker who operates remotely to carry out...
CVE-2008-3442
WinZip before 11.0 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...
The vulnerability of PARTS SOFT’s CMS, related to insufficient verification of the authenticity of executed requests, allows a hacker to perform a CSRF attack.
The vulnerability of PARTS SOFT’s CMS is related to insufficient verification of the authenticity of executed requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack by sending a specially crafted POST request...
The vulnerability of microprogrammed software in PLANET Technology devices stems from the lack of authenticity verification for a critical function. This allows attackers to create accounts with root privileges.
The vulnerability of PLANET Technology’s microprogrammed software for switches is related to the lack of authenticity verification for a critical function. Exploiting this vulnerability could allow a malicious actor, operating remotely, to create a user account with root privileges...
The vulnerability of the in_atomic core function in the Linux operating system, which allows a hacker to trigger a service failure
The vulnerability of the inatomic kernel function in the Linux operating system is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to cause service failures...
CVE-2025-27735
Insufficient verification of data authenticity in Windows Virtualization-Based Security VBS Enclave allows an authorized attacker to bypass a security feature locally...
The vulnerability of the OBN component of the SAP NetWeaver Enterprise Portal software integration platform lies in the lack of authenticity verification for a critical function. This allows attackers to circumvent existing security restrictions.
The vulnerability of the OBN component in the SAP NetWeaver Enterprise Portal software integration platform is related to the lack of authenticity verification for a critical function. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions remotely...