CVE-2025-11303 Belkin F9K1015 mp command injection

A vulnerability was detected in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/mp. Performing a manipulation of the argument command results in command injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted...

Belkin F9K1015 安全漏洞

Belkin F9K1015 is a WiFi signal extender from Belkin Canada. A security vulnerability exists in the Belkin F9K1015 version 1.00.10, which stems from the incorrect manipulation of the parameter command in the file /goform/mp, which could lead to a command injection attack...

EUVD-2021-9879

Malicious code in bioql PyPI...

EUVD-2025-14390

Malicious code in bioql PyPI...

EUVD-2025-25096

Malicious code in bioql PyPI...

EUVD-2021-2856

Malicious code in bioql PyPI...

EUVD-2022-27373

Malicious code in bioql PyPI...

EUVD-2025-19703

Malicious code in bioql PyPI...

EUVD-2025-29479

Malicious code in bioql PyPI...

EUVD-2021-9881

Malicious code in bioql PyPI...

EUVD-2025-13106

Malicious code in bioql PyPI...

EUVD-2025-29400

Malicious code in bioql PyPI...

EUVD-2024-29807

Malicious code in bioql PyPI...

Denial Of Service (DoS)

PocketMine-MP is vulnerable to Denial Of Service DoS. The vulnerability is due to improper validation because the server does not verify uniqueness of packIds in STATUSSENDPACKS, allowing a malicious Bedrock client to send duplicate UUIDs and force repeated pack transfers until memory is exhauste...

PT-2025-46636

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel driver for mailbox communication on ZynqMP-IPI systems had an issue where it incorrectly identified SGI System Group Interrupt versus SPI System Peripheral Interrupt...

CVE-2025-57323

mpregular is a package that provides a small program development framework based on RegularJS. A Prototype Pollution vulnerability in the mp.addEventHandler function of mpregular version 0.2.0 and before allows attackers to inject properties on Object.prototype via supplying a crafted payload,...

PT-2025-40819

Name of the Vulnerable Software and Affected Versions Belkin F9K1015 version 1.00.10 Description A flaw exists in Belkin F9K1015 version 1.00.10 where manipulation of the command argument in the file /goform/mp can lead to command injection. This issue may be exploited remotely. The exploit is...

CVE-2025-9145

Scada-LTS 2.7.8.1 is affected by a cross-site scripting vulnerability in the SVG File Handler, specifically via manipulation of the backgroundImageMP argument in view_edit.shtm. The issue can be triggered remotely and, per multiple sources, the exploit has been publicly disclosed. Current connect...

CVE-2025-9145 Scada-LTS SVG File view_edit.shtm cross site scripting

A security vulnerability has been detected in Scada-LTS 2.7.8.1. This issue affects some unknown processing of the file viewedit.shtm of the component SVG File Handler. Such manipulation of the argument backgroundImageMP leads to cross site scripting. The attack can be launched remotely. The...

CVE-2025-9145 Scada-LTS SVG File view_edit.shtm cross site scripting

A security vulnerability has been detected in Scada-LTS 2.7.8.1. This issue affects some unknown processing of the file viewedit.shtm of the component SVG File Handler. Such manipulation of the argument backgroundImageMP leads to cross site scripting. The attack can be launched remotely. The...