923 matches found
EUVD-2025-16444
Malicious code in bioql PyPI...
EUVD-2025-13619
Malicious code in bioql PyPI...
EUVD-2025-15370
Malicious code in bioql PyPI...
GNU elfutils eu-readelf readelf.c process_symtab buffer overflow
...
GNU elfutils eu-read readelf.c handle_dynamic_symtab null pointer dereference
...
TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability
TP-Link Archer C7EU and TL-WR841N/NDMS contain an OS command injection vulnerability that exists in the Parental Control page. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users should discontinue product utilization...
CVE-2025-9377
The authenticated remote command execution RCE vulnerability exists in the Parental Control page on TP-Link Archer C7EU V2 and TL-WR841N/NDMS V9. This issue affects Archer C7EU V2: before 241108 and TL-WR841N/NDMS V9: before 241108. Both products have reached the status of EOL end-of-life. It's...
CVE-2025-53579
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in captcha.eu Captcha.eu captcha-eu allows Reflected XSS.This issue affects Captcha.eu: from n/a through 1.0.61...
Linux Distros Unpatched Vulnerability : CVE-2025-1377
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability, which was classified as problematic, has been found in GNU elfutils 0.192. This issue affects the function gelfgetsymshndx of the file strip.c ...
CVE-2025-9377
The authenticated remote command execution RCE vulnerability exists in the Parental Control page on TP-Link Archer C7EU V2 and TL-WR841N/NDMS V9. This issue affects Archer C7EU V2: before 241108 and TL-WR841N/NDMS V9: before 241108. Both products have reached the status of EOL end-of-life. It's...
CVE-2025-9377
CVE-2025-9377 is an OS command injection (authenticated RCE) vulnerability on TP-Link Archer C7(EU) V2 and TL-WR841N/ND(MS) V9 in the Parental Control page, affecting versions before 241108. The issues are tied to end-of-life devices; TP-Link released patches and recommended upgrading where possi...
VulnCheck KEV: CVE-2025-9377
The authenticated remote command execution RCE vulnerability exists in the Parental Control page on TP-Link Archer C7EU V2 and TL-WR841N/NDMS V9. This issue affects Archer C7EU V2: before 241108 and TL-WR841N/NDMS V9: before 241108. Both products have reached the status of EOL end-of-life. It's...
CVE-2025-53579 WordPress Captcha.eu Plugin < 1.0.61 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in captcha.eu Captcha.eu captcha-eu allows Reflected XSS.This issue affects Captcha.eu: from n/a through 1.0.61...
Linux Distros Unpatched Vulnerability : CVE-2025-1372
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in GNU elfutils 0.192. It has been declared as critical. Affected by this vulnerability is the function...
Linux Distros Unpatched Vulnerability : CVE-2025-1376
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elfstrptr in the library /libelf/elfstrptr.c ...
WordPress Captcha.eu plugin <= 1.0.61 - Server Side Request Forgery (SSRF) vulnerability
Server Side Request Forgery SSRF vulnerability discovered by ch4r0n in WordPress Plugin Captcha.eu versions = 1.0.61...
MAL-2025-8379 Malicious code in @leaffm/leaf-connect-bully-billows-eu (npm)
The package @leaffm/leaf-connect-bully-billows-eu was found to contain malicious code...
Weidmueller多款产品 安全漏洞
The Weidmueller IE-SR-2TX-WL, among others, is an industrial-grade security router from Weidmueller, Germany. A security vulnerability exists in several Weidmueller products that originates from a stack buffer overflow in the u-link management API, which could result in full access privileges. Th...
Weidmueller多款产品 操作系统命令注入漏洞
The Weidmueller IE-SR-2TX-WL, among others, is an industrial-grade security router from Weidmueller, Germany. An operating system command injection vulnerability exists in several Weidmueller products. The vulnerability stems from improper cleanup of user input in the main web interface, which...