CVE-2023-40796

Phicomm k2 v22.6.529.216 was discovered to contain a command injection vulnerability via the function luci.sys.call...

CVE-2022-37777

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers 3.0.1.17 and earlier were discovered to contain a remote command execution RCE vulnerability via the trHops parameter of the tracert function...

CVE-2022-37778

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the currenttime parameter of the time function...

EUVD-2017-3113

Malware in sbrugna...

EUVD-2022-40388

Malicious code in bioql PyPI...

EUVD-2022-50787

Malicious code in bioql PyPI...

EUVD-2022-50784

Malicious code in bioql PyPI...

EUVD-2022-50786

Malicious code in bioql PyPI...

EUVD-2022-40387

Malicious code in bioql PyPI...

EUVD-2022-40390

Malicious code in bioql PyPI...

EUVD-2022-50785

Malicious code in bioql PyPI...

EUVD-2022-40389

Malicious code in bioql PyPI...

CVE-2022-37780

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the pingAddr parameter of the tracert function...

CVE-2022-48072

Phicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function...

CVE-2022-48071

Phicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext...

CVE-2022-48073

Phicomm K2G v22.6.3.20 was discovered to store the root and admin passwords in plaintext...

CVE-2022-48070

Phicomm K2 v22.6.534.263 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function...

CVE-2022-37779

Phicomm FIR151B A2, FIR302E A2, FIR300B A2, FIR303B A2 routers V3.0.1.17 were discovered to contain a remote command execution RCE vulnerability via the sendnum parameter of the ping function...

CVE-2019-19117

/usr/lib/lua/luci/controller/admin/autoupgrade.lua on PHICOMM K2PSG1218 V22.5.9.163 devices allows remote authenticated users to execute any command via shell metacharacters in the cgi-bin/luci autoUpTime parameter...

CVE-2017-11495

PHICOMM K2PSG1218 devices V22.5.11.5 and earlier allow unauthenticated remote code execution via a request to an unspecified ASP script; alternatively, the attacker can leverage unauthenticated access to this script to trigger a reboot via an ifType=reboot action...