11 matches found
EUVD-2025-6163
Malicious code in bioql PyPI...
CVE-2025-26320
t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address parameter at /device/ping...
CVE-2025-26320
t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address parameter at /device/ping...
BroadlinkManager 操作系统命令注入漏洞
BroadlinkManager is a python-based project by the individual developer Tomer Klein that allows users to control Broadlink devices. A security vulnerability exists in BroadlinkManager version 5.9.1 that stems from vulnerability to command injection attacks...
CVE-2025-26320
t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address parameter at /device/ping...
CVE-2025-26320
t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address parameter at /device/ping...
CVE-2025-26320: Improper Neutralization of Special Elements used in an OS Command
t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address parameter at /device/ping...
CVE-2025-26320
t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address parameter at /device/ping...
PT-2025-9681
Name of the Vulnerable Software and Affected Versions BroadlinkManager version 5.9.1 Description The issue is related to an OS command injection vulnerability. This vulnerability can be exploited via the IP Address parameter at the "/device/ping" API endpoint. Recommendations For BroadlinkManager...
CVE-2025-26320
t0mer BroadlinkManager v5.9.1 was discovered to contain an OS command injection vulnerability via the IP Address parameter at /device/ping...
CVE-2025-26320
The t0mer BroadlinkManager version 5.9.1 is vulnerable to an OS command injection vulnerability. The root cause is the improper neutralization of special elements used in an OS command, specifically within the IP Address parameter at the /device/ping API endpoint. An attacker could potentially ex...