EUVD-2024-19466

Malicious code in bioql PyPI...

EUVD-2024-3294

Malicious code in bioql PyPI...

EUVD-2022-36219

Malicious code in bioql PyPI...

EUVD-2022-35582

Malicious code in bioql PyPI...

EUVD-2025-6783

Malicious code in bioql PyPI...

EUVD-2024-47129

Malicious code in bioql PyPI...

EUVD-2018-0485

Malicious code in bioql PyPI...

EUVD-2024-47124

Malicious code in bioql PyPI...

EUVD-2024-47125

Malicious code in bioql PyPI...

EUVD-2024-47128

Malicious code in bioql PyPI...

EUVD-2024-48495

Malicious code in bioql PyPI...

EUVD-2024-47127

Malicious code in bioql PyPI...

The vulnerability of the HTTP API component of Cisco IOS XE allows a perpetrator to execute arbitrary commands.

The vulnerability of the HTTP API component of Cisco IOS XE operating systems is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

CVE-2025-20334

A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with root privileges into the underlying operating system. This vulnerability is due to insufficient input validation. An attacker with administrative privileges...

CVE-2025-20334

A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with root privileges into the underlying operating system. This vulnerability is due to insufficient input validation. An attacker with administrative privileges...

CVE-2025-20334

Cisco IOS XE Software HTTP API Command Injection vulnerability (CVE-2025-20334) in the HTTP API subsystem allows an attacker to execute commands with root privileges due to insufficient input validation. A remote attacker with administrative privileges can exploit via an API call with crafted inp...

Cisco IOS XE Software HTTP API Command Injection Vulnerability

A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with root privileges into the underlying operating system. This vulnerability is due to insufficient input validation. An attacker with administrative privileges...

CVE-2025-20334: Improper Neutralization of Special Elements used in a Command

A vulnerability in the HTTP API subsystem of Cisco IOS XE Software could allow a remote attacker to inject commands that will execute with root privileges into the underlying operating system. This vulnerability is due to insufficient input validation. An attacker with administrative privileges...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure via the gRPC API and HTTP APIs, which allow peers to send requests that cause the recipient to create files in arbitrary file system locations and read arbitrary files. An attacker can access sensitive data or execu...

CVE-2025-59352: Exposure of Sensitive Information Through Data Queries

Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the gRPC API and HTTP APIs allow peers to send requests that force the recipient peer to create files in arbitrary file system locations, and to read arbitrary files. This allows peers to steal...