CVE-2025-50505

Clash Verge Rev (versions through 2.2.3 ) is vulnerable to Local Privilege Escalation (LPE) and Remote Code Execution (RCE) due to an unauthenticated HTTP API endpoint (/start_clash) in the clash-verge-service component. The service, which runs with elevated privileges (root or SYSTEM), allows at...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-987313)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-987313 advisory. In the Linux kernel, the following vulnerability has been resolved: ath11k: mhi: use mhisyncpowerup If amss.bin was missing ath11k would crash during 'rmmod...

EUVD-2022-32994

Malicious code in bioql PyPI...

EUVD-2025-30434

Malicious code in bioql PyPI...

EUVD-2024-2231

Malicious code in bioql PyPI...

EUVD-2023-51173

Malicious code in bioql PyPI...

EUVD-2022-43398

Malicious code in bioql PyPI...

EUVD-2022-37455

Malicious code in bioql PyPI...

EUVD-2023-59773

Malicious code in bioql PyPI...

EUVD-2022-43431

Malicious code in bioql PyPI...

EUVD-2025-8669

Malicious code in bioql PyPI...

EUVD-2024-20066

Malicious code in bioql PyPI...

EUVD-2023-0452

Malicious code in bioql PyPI...

EUVD-2025-13368

Malicious code in bioql PyPI...

Probeless Vs Probe-Based Variable-Strength Eavesdropping in Quantum Key Distribution

Quantum key distribution QKD is a provably secure way of generating a secret key, which can later be used for encoding and decoding information. In this paper we analyze the effects of an eavesdropper's variable-strength measurements on QKD. Two types of measurements have been considered: i a...

CVE-2025-11073

A vulnerability was detected in Keyfactor RG-EW5100BE EW3.0B11P280EW5100BE-PRO12183019. The affected element is an unknown function of the file /cgi-bin/luci/api/cmd of the component HTTP POST Request Handler. The manipulation of the argument url results in command injection. The attack can be...

CVE-2025-11073

CVE-2025-11073 affects Keyfactor RG-EW5100BE EW_3.0B11P280_EW5100BE-PRO_12183019: the HTTP POST Request Handler in /cgi-bin/luci/api/cmd has an argument url that can be manipulated to trigger command injection. The vulnerability is remote and the exploit is public. Connected records consistently ...

PT-2025-39737

Name of the Vulnerable Software and Affected Versions Keyfactor RG-EW5100BE EW 3.0B11P280 EW5100BE-PRO 12183019 Description A flaw exists in Keyfactor RG-EW5100BE EW 3.0B11P280 EW5100BE-PRO 12183019. The issue is related to command injection stemming from the manipulation of the url argument with...

CVE-2025-11073: Improper Neutralization of Special Elements used in a Command

A vulnerability was detected in Keyfactor RG-EW5100BE EW3.0B11P280EW5100BE-PRO12183019. The affected element is an unknown function of the file /cgi-bin/luci/api/cmd of the component HTTP POST Request Handler. The manipulation of the argument url results in command injection. The attack can be...

Wavlink NU516U1 命令注入漏洞

Wavlink NU516U1 is a wireless print server from China Ruiyin Wavlink. A command injection vulnerability exists in the Wavlink NU516U1 M16U1V240425, which originates from a misbehavior of the function sub4016F0 in the file /cgi-bin/firewall.cgi with respect to the parameter delflag, which could le...