EUVD-2022-39619

Malicious code in bioql PyPI...

EUVD-2025-21427

Malicious code in bioql PyPI...

EUVD-2025-14821

Malicious code in bioql PyPI...

EUVD-2025-6970

Malicious code in bioql PyPI...

EUVD-2023-45841

Malicious code in bioql PyPI...

EUVD-2024-21029

Malicious code in bioql PyPI...

EUVD-2022-33010

Malicious code in bioql PyPI...

EUVD-2024-3610

Malicious code in bioql PyPI...

EUVD-2023-47916

Malicious code in bioql PyPI...

EUVD-2023-46240

Malicious code in bioql PyPI...

EUVD-2023-41328

Malicious code in bioql PyPI...

EUVD-2023-51807

Malicious code in bioql PyPI...

EUVD-2023-50638

Malicious code in bioql PyPI...

CVE-2025-47212 QTS, QuTS hero

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...

CVE-2025-47212: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...

MeteoBridge template.cgi command injection

Added: 10/03/2025 CVE: CVE-2025-4008 Background MeteoBridge is a device which connects personal weather stations to public weather networks. Problem A command injection vulnerability in the MeteoBridge web interface could allow remote, unauthenticated attackers to execute arbitrary commands by...

Tenda AC18 router software Arbitrary Command Execution

The vulnerability of the /goform/AdvSetLanip file in the Tenda AC18 microprogramming router software is related to the lack of measures for cleaning input data during the processing of the lanIp parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Tenda AC9/AC15 cmdinput Component Command Execution

The vulnerability of the formexeCommand function /goform/exeCommand of the cmdinput component in the Tenda AC9 and AC15 microprogrammed devices lies in the lack of measures to neutralize special elements used in the operating system’s command when processing the path parameter. Exploiting this...

CVE-2025-59740

AndSoft e-TMS v25.03 has an OS command injection vulnerability arising from misuse of the m parameter in /clt/LOGINFRM_CAT.ASP. A crafted POST request can lead to execution of operating system commands on the server. Reported across multiple feeds (CNVD/CNNVD/CVELIST-derived notes; PT-SEC) with n...

CVE-2025-59735

CVE-2025-59735 concerns an operating system command injection in AndSoft’s e-TMS v25.03. The vulnerability arises from the misuse of the POST parameter m in the endpoint /clt/LOGINFRM.ASP , allowing an attacker to execute OS commands on the server. Reported in multiple feeds, the issue is describ...