371 matches found
EUVD-2019-17253
Malware in sbrugna...
EUVD-2025-16559
Malicious code in bioql PyPI...
EUVD-2025-8023
Malicious code in bioql PyPI...
EUVD-2025-8030
Malicious code in bioql PyPI...
EUVD-2025-8013
Malicious code in bioql PyPI...
EUVD-2025-2786
Malicious code in bioql PyPI...
EUVD-2025-19039
Malicious code in bioql PyPI...
EUVD-2023-54596
Malicious code in bioql PyPI...
CVE-2025-56764
Trivision NC-227WF firmware 5.80 build 20141010 login mechanism reveals whether a username exists or not by returning different error messages "Unknown user" vs. "Wrong password", allowing an attacker to enumerate valid usernames...
๐ Trivision NC-227WF Username Enumeration
Trivision NC-227WF with firmware version 5.80 build 0141010 has a login mechanism that reveals whether a username exists or not by returning different error messages. CVE-2025-56764 โ Trivision NC-227WF Summary Trivision NC-227WF firmware 5.80 build 20141010 login mechanism reveals whether a...
Trivision NC-227WF ๅฎๅ จๆผๆด
Trivision NC-227WF is a webcam from Trivision USA. A security vulnerability exists in Trivision NC-227WF version 5.80, which stems from a login mechanism that returns a different error message, potentially leading to username enumeration...
CVE-2025-56764
Trivision NC-227WF firmware 5.80 build 20141010 login mechanism reveals whether a username exists or not by returning different error messages "Unknown user" vs. "Wrong password", allowing an attacker to enumerate valid usernames...
CVE-2025-56764
Trivision NC-227WF firmware 5.80 build 20141010 login mechanism reveals whether a username exists or not by returning different error messages "Unknown user" vs. "Wrong password", allowing an attacker to enumerate valid usernames...
CVE-2025-56764
CVE-2025-56764 affects Trivision NC-227WF firmware 5.80 (build 20141010). The login mechanism returns distinct errors for unknown usernames vs. wrong passwords, enabling username enumeration over a network attack surface. Impact is username enumeration, which can facilitate targeted credential st...
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.
...
VulnCheck KEV: CVE-2025-2712
A vulnerability was found in Yonyou UFIDA ERP-NC 5.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /help/top.jsp. The manipulation of the argument langcode leads to cross site scripting. The attack can be launched remotely. The exploi...
CVE-2025-34039
A code injection vulnerability exists in Yonyou UFIDA NC v6.5 and prior due to the exposure of the BeanShell testing servlet bsh.servlet.BshServlet without proper access controls. The servlet allows unauthenticated remote attackers to execute arbitrary Java code via the bsh.script parameter. This...
CVE-2025-34039 Yonyou NC BeanShell Command Injection
A code injection vulnerability exists in Yonyou UFIDA NC v6.5 and prior due to the exposure of the BeanShell testing servlet bsh.servlet.BshServlet without proper access controls. The servlet allows unauthenticated remote attackers to execute arbitrary Java code via the bsh.script parameter. This...
CVE-2025-34039 Yonyou NC BeanShell Command Injection
A code injection vulnerability exists in Yonyou UFIDA NC v6.5 and prior due to the exposure of the BeanShell testing servlet bsh.servlet.BshServlet without proper access controls. The servlet allows unauthenticated remote attackers to execute arbitrary Java code via the bsh.script parameter. This...
CVE-2025-34039
CVE-2025-34039 affects Yonyou UFIDA NC v6.5 and earlier, due to exposure of the BeanShell testing servlet (bsh.servlet.BshServlet) without proper access controls. An unauthenticated remote attacker can exploit the bsh.script parameter to execute arbitrary Java code, potentially running system com...