412 matches found
EUVD-2022-37557
Malicious code in bioql PyPI...
EUVD-2022-37559
Malicious code in bioql PyPI...
EUVD-2022-42606
Malicious code in bioql PyPI...
EUVD-2021-32455
Malicious code in bioql PyPI...
EUVD-2024-2043
Malicious code in bioql PyPI...
EUVD-2022-30060
Malicious code in bioql PyPI...
D-Link DI-7400G+ 安全漏洞
The D-Link DI-7400G+ is a router from China-based AUO D-Link. A security vulnerability exists in the D-Link DI-7400G+ that originates from a command injection in the parameter acmngsrvhost in mngplatform.asp and wayosacserver.asp...
CVE-2025-57105
The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub478D28 function in in mngplatform.asp, and sub4A12DC function in wayosacserver.asp of the jhttpd program, with the parameter acmngsrvhost...
CVE-2025-55587
TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain a buffer overflow in the hostname parameter at /boafrm/formMapDelDevice. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted input...
Netgear JWNR2000v2 Command Injection
The vulnerability of the cmdwireless function in Netgear JWNR2000v2 router microprogramming software is related to the lack of data cleaning measures at the control level when processing the host parameter. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...
Netgear JWNR2000v2 Sub Function Buffer Overflow
The vulnerability of the sub4238E8 function in Netgear JWNR2000v2 microprogrammed software lies in the copying of buffers without checking the size of the input data when processing the host parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity,...
Netgear JWNR2000v2 Sub Function Arbitrary Command Execution
The vulnerability of the sub435E04 function in Netgear JWNR2000v2 microprogrammed software lies in the lack of measures taken to clean data at the control level when processing the host parameter. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary commands...
Nagios XI Network Monitor 安全漏洞
Nagios XI Network Monitor is an IT infrastructure monitoring software and alerting solution from Nagios Corporation, USA. A security vulnerability exists in Nagios XI Network Monitor versions prior to 1.3, which stems from an uncleaned host parameter that could lead to command injection...
NETGEAR WNCE3001 Buffer Overflow Vulnerability
The NETGEAR WNCE3001 is a dual-band wireless network adapter designed for smart TVs, Blu-ray players, and other devices that connect wirelessly via an Ethernet interface. The NETGEAR WNCE3001 suffers from a buffer overflow vulnerability that stems from the HTTP POST request handler mishandling th...
diyhi bbs 安全漏洞
diyhi bbs patrol cloud light forum system is a forum system for diyhi individual developers. A security vulnerability exists in diyhi bbs version 6.8 and earlier, which stems from improper manipulation of the Host parameter in the getUrl function of the HTTP header processing component, which cou...
Summer Pearl Vacation Rental Management Platform 输入验证错误漏洞
Summer Pearl Vacation Rental Management Platform is a vacation rental management platform from Summer Pearl, Inc. An input validation error vulnerability exists in Summer Pearl Vacation Rental Management Platform version 1.0.1 and prior versions, which stems from an open redirect due to the...
CVE-2024-42543
TOTOLINK A3700R v9.1.2u.5822B20200513 has a buffer overflow vulnerability in the httphost parameter in the loginauth function...
CVE-2024-9004
A vulnerability classified as critical has been found in D-Link DAR-7000 up to 20240912. Affected is an unknown function of the file /view/DBManage/BackupServercommit.php. The manipulation of the argument host leads to os command injection. It is possible to launch the attack remotely. The exploi...