EUVD-2022-49122

Malicious code in bioql PyPI...

EUVD-2023-33219

Malicious code in bioql PyPI...

EUVD-2021-2822

Malicious code in bioql PyPI...

EUVD-2025-12537

Malicious code in bioql PyPI...

EUVD-2021-7602

Malicious code in bioql PyPI...

EUVD-2022-41269

Malicious code in bioql PyPI...

EUVD-2022-31220

Malicious code in bioql PyPI...

EUVD-2024-19445

Malicious code in bioql PyPI...

EUVD-2023-41454

Malicious code in bioql PyPI...

EUVD-2021-8058

Malicious code in bioql PyPI...

Vigor routers running DrayOS are vulnerable to RCE via EasyVPN and LAN web administration interface

Overview A remote code execution RCE vulnerability was discovered through the EasyVPN and LAN web administration interface of Vigor routers by Drayteck. A script in the LAN web administration interface uses an unitialized variable, allowing an attacker to inject arbitrary commands through memory...

CVE-2023-28760

TP-Link AX1800 WiFi 6 Router Archer AX21 devices allow unauthenticated attackers on the LAN to execute arbitrary code as root via the dbdir field to minidlnad. The attacker obtains the ability to modify files.db, and that can be used to reach a stack-based buffer overflow in...

CVE-2025-11121

A security vulnerability has been detected in Tenda AC18 15.03.05.19. The impacted element is an unknown function of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and m...

CVE-2025-11121

CVE-2025-11121 is a command-injection vulnerability in the Tenda AC18 (firmware 15.03.05.19) related to the function in the file /goform/AdvSetLanip where the argument lanIp is mishandled. The attack is remote and the exploit has been publicly disclosed. The impact is described as high (per CVSS ...

CVE-2025-11121 Tenda AC18 AdvSetLanip command injection

A security vulnerability has been detected in Tenda AC18 15.03.05.19. The impacted element is an unknown function of the file /goform/AdvSetLanip. The manipulation of the argument lanIp leads to command injection. The attack can be initiated remotely. The exploit has been disclosed publicly and m...

PT-2025-39792

Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.19 Description A security issue exists in Tenda AC18 version 15.03.05.19. The issue involves command injection through manipulation of the lanIp argument in the file /goform/AdvSetLanip. This can be initiated...

CVE-2025-47326 Buffer Over-read in WLAN HAL

Transient DOS while handling command data during power control processing...

CVE-2025-47326

CVE-2025-47326 is described in the CVE ecosystem as a Transient DoS issue related to processing of command data during power control, with the CVE-List entry specifically noting a Buffer Over-read in the WLAN HAL. The connected entries indicate this affects Qualcomm components (including WLAN HAL...

net: dsa: Avoid cross-chip syncing of VLAN filtering

...

Cisco Wireless LAN Controller 安全漏洞

Cisco Wireless LAN Controller WLC is a wireless LAN controller product from Cisco USA. The product provides security policy, intrusion detection, and other functions in a wireless LAN. A security vulnerability exists in Cisco Wireless LAN Controller that stems from insufficient validation of 802....