EUVD-2024-39088

Malicious code in bioql PyPI...

EUVD-2023-23445

Malicious code in bioql PyPI...

EUVD-2024-41899

Malicious code in bioql PyPI...

EUVD-2024-41874

Malicious code in bioql PyPI...

EUVD-2024-39090

Malicious code in bioql PyPI...

EUVD-2024-41907

Malicious code in bioql PyPI...

EUVD-2023-23301

Malicious code in bioql PyPI...

EUVD-2024-41883

Malicious code in bioql PyPI...

EUVD-2024-41901

Malicious code in bioql PyPI...

EUVD-2024-41896

Malicious code in bioql PyPI...

EUVD-2024-41875

Malicious code in bioql PyPI...

EUVD-2024-41888

Malicious code in bioql PyPI...

EUVD-2024-41894

Malicious code in bioql PyPI...

DrayTek Vigor Routers 安全漏洞

DrayTek Vigor Routers is a series of wireless routers from China-based DrayTek. A security vulnerability exists in DrayTek Vigor Routers that stems from the presence of uninitialized variables in the HTTP CGI request parameter handling component, which could lead to memory corruption and remote...

Vigor routers running DrayOS are vulnerable to RCE via EasyVPN and LAN web administration interface

Overview A remote code execution RCE vulnerability was discovered through the EasyVPN and LAN web administration interface of Vigor routers by Drayteck. A script in the LAN web administration interface uses an unitialized variable, allowing an attacker to inject arbitrary commands through memory...

PT-2025-40432

Name of the Vulnerable Software and Affected Versions DrayOS routers versions prior to the fixed firmware. Description A flaw exists in the HTTP CGI request arguments processing component of DrayOS routers, potentially allowing an attacker to execute code remotely RCE through memory corruption...

VulnCheck KEV: CVE-2024-45887

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to doOpenVPN...

VulnCheck KEV: CVE-2024-45890

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to downloadovpn...

VulnCheck KEV: CVE-2024-45888

DrayTek Vigor3900 1.5.1.3 contains a command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to setapmapconfig.'...

VulnCheck KEV: CVE-2024-45884

DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to setSWMGroup...