915 matches found
EUVD-2022-37757
Malicious code in bioql PyPI...
EUVD-2022-44941
Malicious code in bioql PyPI...
EUVD-2022-38135
Malicious code in bioql PyPI...
EUVD-2022-24771
Malicious code in bioql PyPI...
EUVD-2022-38602
Malicious code in bioql PyPI...
EUVD-2022-44808
Malicious code in bioql PyPI...
EUVD-2024-39167
Malicious code in bioql PyPI...
EUVD-2024-19946
Malicious code in bioql PyPI...
EUVD-2022-28134
Malicious code in bioql PyPI...
BIG-IP iControl REST Handler Command Execution
The vulnerability of the iControl REST Handler component of the BIG-IP access control and remote authentication solution is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...
CVE-2025-52358
A cross-site scripting vulnerability in Vivaldi United Group iCONTROL+ Server including Firmware version 4.7.8.0.eden Logic version 5.32 and below. This issue allows attackers to inject JavaScript payloads within the error or edit-menu-item parameters which are then executed in the victim's brows...
CVE-2025-52358
A cross-site scripting vulnerability in Vivaldi United Group iCONTROL+ Server including Firmware version 4.7.8.0.eden Logic version 5.32 and below. This issue allows attackers to inject JavaScript payloads within the error or edit-menu-item parameters which are then executed in the victim's brows...
CVE-2025-52358
A cross-site scripting vulnerability in Vivaldi United Group iCONTROL+ Server including Firmware version 4.7.8.0.eden Logic version 5.32 and below. This issue allows attackers to inject JavaScript payloads within the error or edit-menu-item parameters which are then executed in the victim's brows...
CVE-2025-52358: Improper Neutralization of Input During Web Page Generation
A cross-site scripting vulnerability in Vivaldi United Group iCONTROL+ Server including Firmware version 4.7.8.0.eden Logic version 5.32 and below. This issue allows attackers to inject JavaScript payloads within the error or edit-menu-item parameters which are then executed in the victim's brows...
CVE-2025-52358
A cross-site scripting vulnerability in Vivaldi United Group iCONTROL+ Server including Firmware version 4.7.8.0.eden Logic version 5.32 and below. This issue allows attackers to inject JavaScript payloads within the error or edit-menu-item parameters which are then executed in the victim's brows...
CVE-2025-52358
A cross-site scripting (XSS) vulnerability exists in the Vivaldi United Group iCONTROL+ Server (an audio control device) in versions including Firmware 4.7.8.0.eden Logic 5.32 and below . The root cause is the improper neutralization of input during web page generation, specifically within the er...
CVE-2025-52358
A cross-site scripting vulnerability in Vivaldi United Group iCONTROL+ Server including Firmware version 4.7.8.0.eden Logic version 5.32 and below. This issue allows attackers to inject JavaScript payloads within the error or edit-menu-item parameters which are then executed in the victim's brows...
PT-2025-31203 · Logic +1 · Logic +1
Name of the Vulnerable Software and Affected Versions: Vivaldi United Group iCONTROL+ Server versions 4.7.8.0.eden Logic 5.32 and earlier Description: A cross-site scripting issue exists in Vivaldi United Group iCONTROL+ Server. This allows attackers to inject JavaScript payloads into the error o...
Vivaldi iCONTROL+ Server security vulnerabilities
Vivaldi iCONTROL+ Server is an audio control device from the Italian company Vivaldi. A security vulnerability exists in Vivaldi iCONTROL+ Server 4.7.8.0.eden Logic 5.32 and earlier versions, which originates from an unvalidated error or edit-menu-item parameter and could lead to a cross-site...
