EUVD-2025-20131

Malicious code in bioql PyPI...

EUVD-2025-15648

Malicious code in bioql PyPI...

EUVD-2023-29503

Malicious code in bioql PyPI...

EUVD-2022-5859

Malicious code in bioql PyPI...

EUVD-2023-44300

Malicious code in bioql PyPI...

EUVD-2023-44299

Malicious code in bioql PyPI...

EUVD-2022-3497

Malicious code in bioql PyPI...

EUVD-2022-2627

Malicious code in bioql PyPI...

EUVD-2023-1308

Malicious code in bioql PyPI...

EUVD-2022-5478

Malicious code in bioql PyPI...

EUVD-2022-6399

Malicious code in bioql PyPI...

EUVD-2022-46973

Malicious code in bioql PyPI...

CVE-2025-54782

Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution RCE vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API...

CVE-2025-7075

A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /upload.cgi of the component HTTP Endpoint. The manipulation leads to unrestricted upload. The attack needs to be done within...

CVE-2025-7075

CVE-2025-7075 concerns BlackVue Dashcam 590X (up to 20250624) with a vulnerability in the HTTP Endpoint /upload.cgi that allows unrestricted file upload. Root cause: manipulation of an onboard HTTP endpoint leading to unrestricted upload within the local network. Impact: high confidentiality, int...

CVE-2025-7075 BlackVue Dashcam 590X HTTP Endpoint upload.cgi unrestricted upload

A vulnerability was found in BlackVue Dashcam 590X up to 20250624. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /upload.cgi of the component HTTP Endpoint. The manipulation leads to unrestricted upload. The attack needs to be done within...

PT-2025-28038 · Blackvue · Blackvue Dashcam 590X

Name of the Vulnerable Software and Affected Versions: BlackVue Dashcam 590X up to 20250624 Description: A critical vulnerability affects an unknown functionality of the file /upload.cgi of the component HTTP Endpoint, leading to unrestricted upload. The attack must be done within the local...

CVE-2025-27022

A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests. Details: Lack or insufficient validation of user-supplied input allows authenticated users to access all files on the target...

CVE-2025-27022 Path Traversal Vulnerability in Infinera G42

A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests. Details: Lack or insufficient validation of user-supplied input allows authenticated users to access all files on the target...

PT-2025-27615

Name of the Vulnerable Software and Affected Versions: Infinera G42 version R6.1.3 Description: The issue allows remote authenticated users to download all OS files via HTTP requests due to a path traversal vulnerability in the WebGUI HTTP endpoint. This is caused by a lack or insufficient...