EUVD-2025-18261

Malicious code in bioql PyPI...

EUVD-2024-22935

Malicious code in bioql PyPI...

EUVD-2023-42681

Malicious code in bioql PyPI...

EUVD-2024-39654

Malicious code in bioql PyPI...

EUVD-2025-18262

Malicious code in bioql PyPI...

EUVD-2023-39947

Malicious code in bioql PyPI...

EUVD-2023-33339

Malicious code in bioql PyPI...

EUVD-2023-26867

Malicious code in bioql PyPI...

EUVD-2024-52237

Malicious code in bioql PyPI...

EUVD-2023-26906

Malicious code in bioql PyPI...

EUVD-2022-40519

Malicious code in bioql PyPI...

EUVD-2023-55179

Malicious code in bioql PyPI...

EUVD-2023-31532

Malicious code in bioql PyPI...

EUVD-2023-26907

Malicious code in bioql PyPI...

CVE-2025-55589

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain multiple OS command injection vulnerabilities via the macstr, bandstr, and clientoff parameters at /boafrm/formMapDelDevice...

CVE-2025-45988

Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bsSetCmd function...

CVE-2025-45987

This CVE affects Blink router models: BL-WR9000 (v2.4.9), BL-AC2100 AZ3 (v1.0.4), BL-X10 AC8 (v1.0.5), BL-LTE300 (v1.2.3), BL-F1200 AT1 (v1.0.0), BL-X26 AC8 (v1.2.8), BLAC450M AE4 (v4.0.0), and BL-X26 DA3 (v1.2.7). The issue is multiple command injection in the bs_SetDNSInfo function via dns1 and...

CVE-2025-45988

The CVE-2025-45988 entry affects Blink routers (BL-WR9000, BL-AC2100 AZ3, BL-X10 AC8, BL-LTE300, BL-F1200 AT1, BL-X26 AC8, BLAC450M AE4, BL-X26 DA3) with multiple command injection vulnerabilities in the bs_SetCmd function via the cmd parameter. Root cause: improper handling of the cmd parameter ...

CVE-2024-40893

Multiple authenticated operating system OS command injection vulnerabilities exist in Firewalla Box Software versions before 1.979. A physically close attacker that is authenticated to the Bluetooth Low-Energy BTLE interface can use the network configuration service to inject commands in various...

CVE-2023-38921

Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgradehandler function via the firmwareRestore and firmwareServerip parameters...