EUVD-2023-38397

Malicious code in bioql PyPI...

EUVD-2023-23422

Malicious code in bioql PyPI...

EUVD-2023-35129

Malicious code in bioql PyPI...

EUVD-2023-12498

Malicious code in bioql PyPI...

EUVD-2023-23420

Malicious code in bioql PyPI...

EUVD-2022-43502

Malicious code in bioql PyPI...

EUVD-2023-23424

Malicious code in bioql PyPI...

EUVD-2023-23423

Malicious code in bioql PyPI...

EUVD-2023-38427

Malicious code in bioql PyPI...

EUVD-2022-44948

Malicious code in bioql PyPI...

EUVD-2023-23421

Malicious code in bioql PyPI...

EUVD-2023-23418

Malicious code in bioql PyPI...

EUVD-2023-51339

Malicious code in bioql PyPI...

CVE-2023-1142

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve system files, credentials, and bypass authentication resulting in privilege escalation...

CVE-2023-1134

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a path traversal vulnerability, which could allow an attacker to read local files, disclose plaintext credentials, and escalate privileges...

CVE-2023-0444

A privilege escalation vulnerability exists in Delta Electronics InfraSuite Device Master 00.00.02a. A default user 'User', which is in the 'Read Only User' group, can view the password of another default user 'Administrator', which is in the 'Administrator' group. This allows any lower privilege...

CVE-2022-38142

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-Gateway service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization...

CVE-2022-41772

Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior mishandle .ZIP archives containing characters used in path traversal. This path traversal could result in remote code execution...

CVE-2022-41657

Delta Electronics InfraSuite Device Master Versions 00.00.01a and prior allow attacker provided data already serialized into memory to be used in file operation application programmable interfaces APIs. This could create arbitrary files, which could be used in API operations and could ultimately...

CVE-2022-41644

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior lacks authentication for a function that changes group privileges. An attacker could use this to create a denial-of-service state or escalate their own privileges...