EUVD-2023-36283

Malicious code in bioql PyPI...

CVE-2023-31994: Undefined Security Weakness

Certain Hanwha products are vulnerable to Denial of Service DoS. ck vector is: When an empty UDP packet is sent to the listening service, the service thread results in a non-functional service DoS via WS Discovery and Hanwha proprietary discovery services. This affects IP Camera ANE-L7012R 1.41.0...

CVE-2023-31996: Improper Neutralization of Special Elements used in a Command

Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Command Injection due to improper sanitization of special characters for the NAS storage test function...

CVE-2023-31995: Improper Neutralization of Input During Web Page Generation

Hanwha IP Camera ANE-L7012R 1.41.01 is vulnerable to Cross Site Scripting XSS...