EUVD-2025-5402

Malicious code in bioql PyPI...

EUVD-2024-42852

Malicious code in bioql PyPI...

EUVD-2023-31713

Malicious code in bioql PyPI...

EUVD-2022-28461

Malicious code in bioql PyPI...

EUVD-2022-39167

Malicious code in bioql PyPI...

EUVD-2023-26466

Malicious code in bioql PyPI...

EUVD-2025-11884

Malicious code in bioql PyPI...

upload-server-for-novi-software-security

project: "TP-Link TL-WR841N Firmware Security Assessment" descr...

CVE-2025-10095

A SQL injection vulnerability has been identified in the SMPP server component of the SMSEagle firmware, specifically affecting the handling of certain parameters within the server's database interactions. The vulnerability is isolated to the SMPP server, which operates with its own dedicated...

CVE-2025-38729

CVE-2025-38729 relates to the Linux kernel ALSA USB-audio driver and a validation issue with UAC3 power domain descriptors. The root cause is insufficient verification of the descriptor length (bLength), which could allow out-of-bounds accesses via malicious firmware. The vulnerability affects th...

CVE-2025-47324 Exposure of Sensitive Information Through Metadata in Powerline Communication Firmware

Information disclosure while accessing and modifying the PIB file of a remote device via powerline...

PT-2025-31971 · U-Boot +1 · U-Boot +1

Name of the Vulnerable Software and Affected Versions: U-Boot version 1.1.3 Description: A lack of signature verification in the bootloader allows attackers to install crafted firmware files, leading to arbitrary code execution. Recommendations: Update to a newer version that includes signature...

CVE-2025-52361

Insecure permissions in the script /etc/init.d/lighttpd in AK-Nord USB-Server-LXL Firmware v0.0.16 Build 2023-03-13 allows a locally authenticated low-privilege user to execute arbitrary commands with root privilege via editing this script which is executed with root-privileges on any interaction...

CVE-2025-7357

LITEON IC48A firmware versions prior to 01.00.19r and LITEON IC80A firmware versions prior to 01.01.12e store FTP-server-access-credentials in cleartext in their system logs...

Belkin F9K1122 Command Injection Vulnerability (CNVD-2025-20834)

The Belkin F9K1122 is a WiFi signal extender from Belkin Canada. The Belkin F9K1122 suffers from a command injection vulnerability that originates from a misbehavior of the parameters mwanipaddr/mwannetmask/mwangateway/mwanstaticdns1/mwanstaticdns2 in the file /goform/formSetWanStatic. can be...

Qualcomm WLAN Firmware Buffer Over-read Vulnerabilities - Lenovo Support US

No description provided...

CVE-2025-47822

Flock Safety LPR License Plate Reader devices with firmware through 2.2 have an on-chip debug interface with improper access control...

CVE-2025-47822

Flock Safety LPR License Plate Reader devices with firmware through 2.2 have an on-chip debug interface with improper access control...

CVE-2025-47824

Flock Safety LPR License Plate Reader devices with firmware through 2.2 have cleartext storage of code...

CVE-2025-47824

CVE-2025-47824 concerns Flock Safety LPR devices with firmware up to 2.2, where the underlying issue is cleartext storage of code. This is documented across multiple sources (NVD/Red Hat/CERT style advisories and PT-2025-27042). The root cause is not fully elaborated beyond the existence of clear...