893 matches found
CVE-2025-15217: Buffer Copy without Checking Size of Input
A security flaw has been discovered in Tenda AC23 16.03.07.52. Affected is the function formSetPPTPUserList of the component HTTP POST Request Handler. Performing a manipulation of the argument list results in buffer overflow. The attack can be initiated remotely...
CVE-2025-15215: Buffer Copy without Checking Size of Input
A vulnerability was determined in Tenda AC10U 15.03.06.48/15.03.06.49. This affects the function formSetPPTPUserList of the file /goform/setPptpUserList of the component HTTP POST Request Handler. This manipulation of the argument list causes buffer overflow. It is possible to initiate the attack...
CVE-2025-15132: Improper Neutralization of Special Elements used in a Command
A vulnerability was determined in ZSPACE Z4Pro+ 1.0.0440024. The affected element is the function zfilev2apiopen of the file /v2/file/safe/open of the component HTTP POST Request Handler. This manipulation causes command injection. It is possible to initiate the attack remotely. The exploit has...
CVE-2025-15131: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in ZSPACE Z4Pro+ 1.0.0440024. Impacted is the function zfilev2apiSafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation results in command injection. The attack may be performed from remote. The exploit has been made publ...
CVE-2025-15133: Improper Neutralization of Special Elements used in a Command
A vulnerability was identified in ZSPACE Z4Pro+ 1.0.0440024. The impacted element is the function zfilev2apiCloseSafe of the file /v2/file/safe/close of the component HTTP POST Request Handler. Such manipulation leads to command injection. It is possible to launch the attack remotely. The exploit...
CVE-2025-14108: Improper Neutralization of Special Elements used in a Command
A weakness has been identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected by this issue is the function zfilev2api.OpenSafe of the file /v2/file/safe/open of the component HTTP POST Request Handler. This manipulation of the argument safedir causes command injection. It is possible to initiate...
CVE-2025-14107: Improper Neutralization of Special Elements used in a Command
A security flaw has been discovered in ZSPACE Q2C NAS up to 1.1.0210050. Affected by this vulnerability is the function zfilev2api.SafeStatus of the file /v2/file/safe/status of the component HTTP POST Request Handler. The manipulation of the argument safedir results in command injection. The...
CVE-2025-14106: Improper Neutralization of Special Elements used in a Command
A vulnerability was identified in ZSPACE Q2C NAS up to 1.1.0210050. Affected is the function zfilev2api.CloseSafe of the file /v2/file/safe/close of the component HTTP POST Request Handler. The manipulation of the argument safedir leads to command injection. The attack is possible to be carried o...
EUVD-2025-19007
Malicious code in bioql PyPI...
EUVD-2025-12332
Malicious code in bioql PyPI...
EUVD-2024-48063
Malicious code in bioql PyPI...
EUVD-2025-22707
Malicious code in bioql PyPI...
EUVD-2025-2121
Malicious code in bioql PyPI...
EUVD-2023-44426
Malicious code in bioql PyPI...
EUVD-2024-16321
Malicious code in bioql PyPI...
EUVD-2024-16214
Malicious code in bioql PyPI...
EUVD-2023-44416
Malicious code in bioql PyPI...
EUVD-2024-50657
Malicious code in bioql PyPI...