84 matches found
D-Link Network Attached Storage - Backdoor Account Detection
A vulnerability, which was classified as very critical, has been found in D-Link DNS-320L, DNS-325, DNS-327L and DNS-340L up to 20240403. This issue affects some unknown processing of the file /cgi-bin/nassharing.cgi of the component HTTP GET Request Handler. The manipulation of the argument user...
D-LINK DNS-320L,DNS-320LW and DNS-327L - Information Disclosure Detection
A vulnerability has been found in D-Link DNS-320L, DNS-320LW and DNS-327L up to 20240403 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /cgi-bin/info.cgi of the component HTTP GET Request Handler. !/usr/bin/env python3 -- coding: utf-8 -- """...
EasySpider 0.6.2 - Arbitrary File Read Detection
A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows. Affected by this vulnerability is an unknown functionality of the file \EasySpider\resources\app\server.js of the component HTTP GET Request Handler. The manipulation with the input...
CVE-2026-11456: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in Chanjet CRM 1.0. This affects an unknown part of the file /tools/jxfdumpsystable.php of the component HTTP GET Request Handler. Such manipulation of the argument gblOrgID leads to sql injection. The attack may be launched remotely. The exploit is publicly availab...
CVE-2026-5531: Cleartext Storage in a File or on Disk
A vulnerability has been found in SourceCodester Student Result Management System 1.0. Impacted is an unknown function of the file /logincredentials.txt of the component HTTP GET Request Handler. The manipulation leads to cleartext storage in a file or on disk. The attack may be initiated remotel...
CVE-2026-4568: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Sales and Inventory System 1.0. This affects an unknown function of the file /updatesupplier.php of the component HTTP GET Request Handler. The manipulation of the argument sid results in sql injection. The attack may be launched remotely. The exploit h...
CVE-2025-1357
A vulnerability classified as problematic has been found in Seventh D-Guard up to 20250206. This affects an unknown part of the component HTTP GET Request Handler. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the publi...
CVE-2025-11291: Improper Neutralization of Input During Web Page Generation
A security flaw has been discovered in ixmaps website2017 up to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0. This impacts an unknown function of the file /map.php of the component HTTP GET Request Handler. Performing manipulation of the argument trid results in cross site scripting. The attack can b...
EUVD-2024-33346
Malicious code in bioql PyPI...
EUVD-2025-2118
Malicious code in bioql PyPI...
EUVD-2024-16964
Malicious code in bioql PyPI...
EUVD-2025-2007
Malicious code in bioql PyPI...
EUVD-2024-16059
Malicious code in bioql PyPI...
EUVD-2024-16667
Malicious code in bioql PyPI...
EUVD-2024-16259
Malicious code in bioql PyPI...
EUVD-2024-16207
Malicious code in bioql PyPI...
EUVD-2024-16206
Malicious code in bioql PyPI...
EUVD-2025-10384
Malicious code in bioql PyPI...