EUVD-2025-21741

Malicious code in bioql PyPI...

CVE-2025-34130

An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder DVR devices prior to firmware version 2.0b6020200207 via the /z/zbin/nethtml.cgi endpoint. This vulnerability allows attackers to read sensitive configuration files, such as /zconf/service.xml, which can then be used to...

CVE-2025-34132

A command injection vulnerability exists in LILIN Digital Video Recorder DVR devices prior to firmware version 2.0b6020200207 via the Server field in the NTPUpdate configuration. The web service at /z/zbin/dvrbox fails to properly sanitize input, allowing remote attackers to inject and execute...

CVE-2025-34130

An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder DVR devices prior to firmware version 2.0b6020200207 via the /z/zbin/nethtml.cgi endpoint. This vulnerability allows attackers to read sensitive configuration files, such as /zconf/service.xml, which can then be used to...

CVE-2025-34132

A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices running firmware versions prior to 2.0b60_20200207 . The flaw resides in the web service at /z/zbin/dvr_box, where the application fails to properly sanitize input provided to the Server field within the NTPUpd...

CVE-2025-34130

An unauthenticated arbitrary file read vulnerability exists in LILIN Digital Video Recorder (DVR) devices running firmware versions prior to 2.0b60_20200207 . The flaw is reachable via the /z/zbin/net_html.cgi endpoint, allowing attackers to access sensitive configuration files like /zconf/servic...