141 matches found
EUVD-2025-19647
Malicious code in bioql PyPI...
EUVD-2023-29583
Malicious code in bioql PyPI...
EUVD-2023-58207
Malicious code in bioql PyPI...
EUVD-2022-44626
Malicious code in bioql PyPI...
EUVD-2022-46543
Malicious code in bioql PyPI...
EUVD-2022-38422
Malicious code in bioql PyPI...
EUVD-2022-28623
Malicious code in bioql PyPI...
EUVD-2022-27950
Malicious code in bioql PyPI...
EUVD-2025-8841
Malicious code in bioql PyPI...
EUVD-2022-48017
Malicious code in bioql PyPI...
EUVD-2022-52272
Malicious code in bioql PyPI...
EUVD-2021-6808
Malicious code in bioql PyPI...
EUVD-2025-1913
Malicious code in bioql PyPI...
EUVD-2023-40355
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2025-38111
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net/mdiobus: Fix potential out-of- bounds read/write access When using publicly available...
CVE-2025-34050
A cross-site request forgery CSRF vulnerability exists in the web interface of AVTECH IP camera, DVR, and NVR devices. An attacker can craft malicious requests that, when executed in the context of an authenticated user’s browser session, allow unauthorized changes to the device configuration...
CVE-2025-34050 AVTECH IP Camera, DVR, and NVR Devices Cross-Site Request Forgery
A cross-site request forgery CSRF vulnerability exists in the web interface of AVTECH IP camera, DVR, and NVR devices. An attacker can craft malicious requests that, when executed in the context of an authenticated user’s browser session, allow unauthorized changes to the device configuration...
CVE-2025-0325
A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour configuration page in the web interface of the Axis device...
CVE-2025-48417
The certificate and private key used for providing transport layer security for connections to the web interface TCP port 443 is hard-coded in the firmware and are shipped with the update files. An attacker can use the private key to perform man-in-the-middle attacks against users of the admin...
CVE-2024-20305
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the interface. This vulnerability exists because the web-based management interface does not properly valida...