EUVD-2025-9904

Malicious code in bioql PyPI...

CVE-2025-3268

A vulnerability has been found in qinguoyi TinyWebServer up to 1.0 and classified as critical. This vulnerability affects unknown code of the file http/httpconn.cpp. The manipulation of the argument murlreal leads to improper authentication. The attack can be initiated remotely. The exploit has...

CVE-2025-3267

A vulnerability, which was classified as critical, was found in qinguoyi TinyWebServer up to 1.0. This affects an unknown part of the file /http/httpconn.cpp. The manipulation of the argument name/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2025-3268

A vulnerability has been found in qinguoyi TinyWebServer up to 1.0 and classified as critical. This vulnerability affects unknown code of the file http/httpconn.cpp. The manipulation of the argument murlreal leads to improper authentication. The attack can be initiated remotely. The exploit has...

CVE-2025-3268 qinguoyi TinyWebServer http_conn.cpp improper authentication

A vulnerability has been found in qinguoyi TinyWebServer up to 1.0 and classified as critical. This vulnerability affects unknown code of the file http/httpconn.cpp. The manipulation of the argument murlreal leads to improper authentication. The attack can be initiated remotely. The exploit has...

CVE-2025-3268 qinguoyi TinyWebServer http_conn.cpp improper authentication

A vulnerability has been found in qinguoyi TinyWebServer up to 1.0 and classified as critical. This vulnerability affects unknown code of the file http/httpconn.cpp. The manipulation of the argument murlreal leads to improper authentication. The attack can be initiated remotely. The exploit has...

CVE-2025-3268

The CVE-2025-3268 entry concerns qinguoyi TinyWebServer (up to version 1.0). The issue is in the HTTP pathway (http/http_conn.cpp) where manipulation of the m_url_real argument leads to improper authentication, enabling a remote attack. Several connected sources (Red Hat, NVD, VulDB ecosystem, PT...

CVE-2025-3267 qinguoyi TinyWebServer http_conn.cpp sql injection

A vulnerability, which was classified as critical, was found in qinguoyi TinyWebServer up to 1.0. This affects an unknown part of the file /http/httpconn.cpp. The manipulation of the argument name/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2025-3267

CVE-2025-3267 affects qinguoyi TinyWebServer up to version 1.0. The vulnerability lies in the file /http/http_conn.cpp where manipulation of the name/password arguments leads to an SQL injection. The issue is exploitable remotely and the exploit has been disclosed publicly. Multiple sources class...

CVE-2025-3267 qinguoyi TinyWebServer http_conn.cpp sql injection

A vulnerability, which was classified as critical, was found in qinguoyi TinyWebServer up to 1.0. This affects an unknown part of the file /http/httpconn.cpp. The manipulation of the argument name/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

CVE-2025-3266 qinguoyi TinyWebServer http_conn.cpp stack-based overflow

A vulnerability, which was classified as critical, has been found in qinguoyi TinyWebServer up to 1.0. Affected by this issue is some unknown functionality of the file /http/httpconn.cpp. The manipulation of the argument name/password leads to stack-based buffer overflow. The attack may be launch...

CVE-2025-3266

CVE-2025-3266 affects qinguoyi TinyWebServer (up to 1.0). The root cause is a stack-based buffer overflow in the handling of the name/password arguments within the HTTP connection path (specifically in /http/http_conn.cpp). This vulnerability potentially enables remote exploitation with the attac...

CVE-2025-3266 qinguoyi TinyWebServer http_conn.cpp stack-based overflow

A vulnerability, which was classified as critical, has been found in qinguoyi TinyWebServer up to 1.0. Affected by this issue is some unknown functionality of the file /http/httpconn.cpp. The manipulation of the argument name/password leads to stack-based buffer overflow. The attack may be launch...

PT-2025-15044 · Qinguoyi · Qinguoyi Tinywebserver

Name of the Vulnerable Software and Affected Versions: qinguoyi TinyWebServer version 1.0 Description: A vulnerability has been found in qinguoyi TinyWebServer, classified as critical. This issue affects unknown code of the file http/http conn.cpp. The manipulation of the argument m url real lead...

CVE-2025-3268: Improper Authentication

A vulnerability has been found in qinguoyi TinyWebServer up to 1.0 and classified as critical. This vulnerability affects unknown code of the file http/httpconn.cpp. The manipulation of the argument murlreal leads to improper authentication. The attack can be initiated remotely. The exploit has...

CVE-2025-3266: Stack-based Buffer Overflow

A vulnerability, which was classified as critical, has been found in qinguoyi TinyWebServer up to 1.0. Affected by this issue is some unknown functionality of the file /http/httpconn.cpp. The manipulation of the argument name/password leads to stack-based buffer overflow. The attack may be launch...

PT-2025-15043 · Unknown · Qinguoyi Tinywebserver

Name of the Vulnerable Software and Affected Versions: qinguoyi TinyWebServer version 1.0 Description: A critical issue was found in the software, affecting the file /http/http conn.cpp. The manipulation of the name and password arguments leads to sql injection. This issue can be exploited...

CVE-2025-3267: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in qinguoyi TinyWebServer up to 1.0. This affects an unknown part of the file /http/httpconn.cpp. The manipulation of the argument name/password leads to sql injection. It is possible to initiate the attack remotely. The exploit has bee...

PT-2025-15042 · Unknown · Qinguoyi Tinywebserver

Name of the Vulnerable Software and Affected Versions: qinguoyi TinyWebServer version 1.0 Description: A critical issue has been found in the software, affecting some unknown functionality of the file /http/http conn.cpp. The manipulation of the name and password arguments leads to a stack-based...