EUVD-2022-25024

Malicious code in bioql PyPI...

Code injection

The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS...

CVE-2022-1743 2.2.5 PATH TRAVERSAL: '../FILEDIR' CWE-24

The tested version of Dominion Voting System ImageCast X can be manipulated to cause arbitrary code execution by specially crafted election definition files. An attacker could leverage this vulnerability to spread malicious code to ImageCast X devices from the EMS...