489 matches found
EUVD-2022-53186
Malicious code in bioql PyPI...
EUVD-2025-12634
Malicious code in bioql PyPI...
EUVD-2024-16158
Malicious code in bioql PyPI...
EUVD-2025-26523
Malicious code in bioql PyPI...
EUVD-2022-39762
Malicious code in bioql PyPI...
EUVD-2022-30233
Malicious code in bioql PyPI...
Kaseya KServer 安全漏洞
Kaseya KServer is a central server node for a management system from Kaseya Corporation, USA. A security vulnerability exists in Kaseya KServer that stems from a container image build that creates a /etc/passwd file with group writable permissions, which could lead to elevated privileges...
PHPGurukul Small CRM SQL注入漏洞
Small CRM is a customer relationship management system. Small CRM suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter email in the file /forgot-password.php. An attacker can exploit this vulnerability to...
PT-2025-39689
Name of the Vulnerable Software and Affected Versions WAYOS versions 22.03.17 LQ 04, LQ 05, LQ 06, LQ 07, and LQ 09 Description A flaw exists in WAYOS that allows for command injection. This occurs due to the manipulation of the Name argument within an unknown function of the /usb paswd.asp file...
CVE-2025-49089
wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd...
D-Link多款产品 操作系统命令注入漏洞
D-Link DI-8100 and others are products of China AUO D-Link.D-Link DI-8100 is a wireless broadband router designed for small and medium-sized network environments.D-Link DI-8100G is a Gigabit Internet Behavior Management certified router.D-Link DI-8200 is an enterprise-class router. An OS command...
CVE-2025-49089
wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd...
CVE-2025-9556 CVE-2025-9556
Langchaingo supports the use of jinja2 syntax when parsing prompts, which is in turn parsed using the gonja library v1.5.3. Gonja supports include and extends syntax to read files, which leads to a server side template injection vulnerability within langchaingo, allowing an attacker to insert a...
Exploit for Improper Initialization in Linux Linux_Kernel
CVE-2022-0847 exploit of CVE-2022-0847 which directly remove p...
Cri-o: /etc/passwd tampering privesc
...
CVE-2025-9383
A security vulnerability has been detected in FNKvision Y215 CCTV Camera 10.194.120.40. This issue affects the function crypt of the file /etc/passwd. The manipulation leads to use of weak hash. The attack can only be performed from a local environment. The complexity of an attack is rather high...
CVE-2025-9380
A vulnerability was identified in FNKvision Y215 CCTV Camera 10.194.120.40. Affected by this issue is some unknown functionality of the file /etc/passwd of the component Firmware. Such manipulation leads to hard-coded credentials. Local access is required to approach this attack. The exploit is...
CVE-2025-9383
A security vulnerability has been detected in FNKvision Y215 CCTV Camera 10.194.120.40. This issue affects the function crypt of the file /etc/passwd. The manipulation leads to use of weak hash. The attack can only be performed from a local environment. The complexity of an attack is rather high...
CVE-2025-9383 FNKvision Y215 CCTV Camera passwd crypt weak hash
A security vulnerability has been detected in FNKvision Y215 CCTV Camera 10.194.120.40. This issue affects the function crypt of the file /etc/passwd. The manipulation leads to use of weak hash. The attack can only be performed from a local environment. The complexity of an attack is rather high...
CVE-2025-9383 FNKvision Y215 CCTV Camera passwd crypt weak hash
A security vulnerability has been detected in FNKvision Y215 CCTV Camera 10.194.120.40. This issue affects the function crypt of the file /etc/passwd. The manipulation leads to use of weak hash. The attack can only be performed from a local environment. The complexity of an attack is rather high...