102 matches found
CVE-2025-62846
Summary: CVE-2025-62846 is a SQL injection vulnerability affecting QHora/QuRouter. An attacker with local administrator privileges can exploit the flaw to execute unauthorized commands, with a CVSSv4 base score of 9.3 (CRITICAL), using a local attack vector, no user interaction required, and high...
CVE-2025-62846 QuRouter
An SQL injection vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: QuRouter 2.6.2.007 and later...
CVE-2025-62846 QuRouter
An SQL injection vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: QuRouter 2.6.2.007 and later...
CVE-2025-62846
An SQL injection vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: QuRouter 2.6.2.007 and later...
PT-2026-26634
Name of the Vulnerable Software and Affected Versions QHora versions prior to 2.6.2.007 Description A weak authentication issue exists in QHora. An attacker with local network access can exploit this to obtain sensitive information. Recommendations Update to version 2.6.2.007 or later...
PT-2026-26636
Name of the Vulnerable Software and Affected Versions QHora versions prior to 2.6.2.007 Description An SQL injection issue exists in QHora. A local attacker with administrator privileges can exploit this to execute unauthorized code or commands. The vulnerability allows for the execution of...
CVE-2025-62843: Improper Restriction of Communication Channel to Intended Endpoints
An improper restriction of communication channel to intended endpoints vulnerability has been reported to affect QHora. If an attacker gains physical access, they can then exploit the vulnerability to gain the privileges that were intended for the original endpoint. We have already fixed the...
PT-2026-26633
Name of the Vulnerable Software and Affected Versions QHora versions prior to 2.6.3.009 Description An issue exists in QHora where an improper restriction of communication channels to intended endpoints can allow an attacker with physical access to gain elevated privileges. The issue was exploite...
CVE-2025-62845: Improper Neutralization of Escape, Meta, or Control Sequences
An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit the vulnerability to cause unexpected behavior. We have already fixed the vulnerability in the following...
EUVD-2025-27754
Malicious code in bioql PyPI...
EUVD-2024-45185
Malicious code in bioql PyPI...
EUVD-2024-43181
Malicious code in bioql PyPI...
EUVD-2024-54248
Malicious code in bioql PyPI...
EUVD-2024-54651
Malicious code in bioql PyPI...
EUVD-2024-54221
Malicious code in bioql PyPI...
EUVD-2024-43182
Malicious code in bioql PyPI...
EUVD-2024-54652
Malicious code in bioql PyPI...
CVE-2025-29887
A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.5.1.060 and later...
CVE-2025-29887
A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.5.1.060 and later...
CVE-2025-29887
A command injection vulnerability has been reported to affect QuRouter 2.5.1. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.5.1.060 and later...