Emerson Dixell XWEB-500 - Arbitrary File Write

Emerson Dixell XWEB-500 contains an arbitrary file write caused by unauthenticated access to /cgi-bin/logoextraupload.cgi, /cgi-bin/calsave.cgi, and /cgi-bin/loutils.cgi, letting attackers write any file on the system, exploit requires no authentication. id: CVE-2021-45420 info: name: Emerson...

Exploit for CVE-2026-38422

CVE-2026-38422: Remote Code Execution via Combined Buffer Over...

vulnerability-research

Vulnerability Research & Responsible Disclosure Shivam Paji...

SenseLive X3050 跨站请求伪造漏洞

The SenseLive X3050 is a data collection and environmental monitoring device designed for IoT scenarios by SenseLive Corporation. The SenseLive X3050 has a cross-site request forgeing vulnerability. This vulnerability arises from the lack of protection against cross-site request forgeing in the w...

CVE-2022-42054

Multiple stored cross-site scripting XSS vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Company Name and Description text fields...

CVE-2022-42055

Multiple command injection vulnerabilities in GL.iNet GoodCloud IoT Device Management System Version 1.00.220412.00 via the ping and traceroute tools allow attackers to read arbitrary files on the system...

CVE-2021-22547

In IoT Devices SDK, there is an implementation of calloc that doesn't have a length check. An attacker could pass in memory objects larger than the buffer and wrap around to have a smaller buffer than required, allowing the attacker access to the other parts of the heap. We recommend upgrading th...

CVE-2025-66647 RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass

RIOT is an open-source microcontroller operating system, designed to match the requirements of Internet of Things IoT devices and other embedded devices. A vulnerability was discovered in the IPv6 fragmentation reassembly implementation of RIOT OS v2025.07. When copying the contents of the first...

EUVD-2017-2364

Malware in sbrugna...

EUVD-2017-2367

Malware in sbrugna...

EUVD-2021-0029

Malware in sbrugna...

EUVD-2019-2771

Malware in sbrugna...

EUVD-2021-0028

Malware in sbrugna...

EUVD-2020-3404

Malware in sbrugna...

EUVD-2021-0031

Malware in sbrugna...

EUVD-2023-38447

Malicious code in bioql PyPI...

EUVD-2022-45146

Malicious code in bioql PyPI...

EUVD-2022-34053

Malicious code in bioql PyPI...

EUVD-2022-39482

Malicious code in bioql PyPI...

EUVD-2022-45145

Malicious code in bioql PyPI...