18056 matches found
EUVD-2025-29169
Malicious code in bioql PyPI...
EUVD-2025-28870
Malicious code in bioql PyPI...
EUVD-2025-30808
Malicious code in bioql PyPI...
EUVD-2025-7768
Malicious code in bioql PyPI...
EUVD-2024-1279
Malicious code in bioql PyPI...
EUVD-2025-23258
Malicious code in bioql PyPI...
EUVD-2022-37774
Malicious code in bioql PyPI...
EUVD-2023-35328
Malicious code in bioql PyPI...
EUVD-2023-3116
Malicious code in bioql PyPI...
EUVD-2025-29000
Malicious code in bioql PyPI...
EUVD-2025-19215
Malicious code in bioql PyPI...
EUVD-2023-42644
Malicious code in bioql PyPI...
CVE-2025-61592 Cursor CLI: Arbitrary Code Execution Possible through Permissive CLI Config
Cursor is a code editor built for programming with AI. In versions 1.7 and below, automatic loading of project-specific CLI configuration from the current working directory /.cursor/cli.json could override certain global configurations in Cursor CLI. This allowed users running the CLI inside a...
CVE-2025-10547
DrayTek Vigor Routers running DrayOS firmware are vulnerable to Remote Code Execution (RCE) via an uninitialized variable in the HTTP CGI request arguments processing component. This memory corruption flaw allows an unauthenticated attacker to inject arbitrary commands or execute malicious payloa...
CISA Flags Meteobridge CVE-2025-4008 Flaw as Actively Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a high-severity security flaw impacting Smartbedded Meteobridge to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, CVE-2025-4008 CVSS score: 8.7, is a case ...
MeteoBridge template.cgi command injection
Added: 10/03/2025 CVE: CVE-2025-4008 Background MeteoBridge is a device which connects personal weather stations to public weather networks. Problem A command injection vulnerability in the MeteoBridge web interface could allow remote, unauthenticated attackers to execute arbitrary commands by...
Exploit for Code Injection in Xwiki
XWiki SSTI Exploit A Python exploit for XWiki Server-Side Tem...
CVE-2025-59735
Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRM.ASP'...
CVE-2025-59738
Operating system command injection vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute operating system commands on the server by sending a POST request. The relationship between parameter and assigned identifier is a 'm' parameter in '/clt/LOGINFRMBET.ASP'...
