23301 matches found
EUVD-2023-42701
Malicious code in bioql PyPI...
EUVD-2022-2917
Malicious code in bioql PyPI...
EUVD-2024-32448
Malicious code in bioql PyPI...
EUVD-2023-52693
Malicious code in bioql PyPI...
EUVD-2023-42702
Malicious code in bioql PyPI...
EUVD-2022-35319
Malicious code in bioql PyPI...
EUVD-2024-54100
Malicious code in bioql PyPI...
EUVD-2025-12271
Malicious code in bioql PyPI...
EUVD-2021-28751
Malicious code in bioql PyPI...
EUVD-2023-27462
Malicious code in bioql PyPI...
EUVD-2025-21792
Malicious code in bioql PyPI...
CVE-2025-47212 QTS, QuTS hero
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...
CISA Flags Meteobridge CVE-2025-4008 Flaw as Actively Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a high-severity security flaw impacting Smartbedded Meteobridge to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, CVE-2025-4008 CVSS score: 8.7, is a case ...
The vulnerability of the /goform/AdvSetLanip file in the Tenda AC18 microprogramming router software allows a hacker to execute arbitrary commands.
The vulnerability of the /goform/AdvSetLanip file in the Tenda AC18 microprogramming router software is related to the lack of measures for cleaning input data during the processing of the lanIp parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...
MeteoBridge template.cgi command injection
Added: 10/03/2025 CVE: CVE-2025-4008 Background MeteoBridge is a device which connects personal weather stations to public weather networks. Problem A command injection vulnerability in the MeteoBridge web interface could allow remote, unauthenticated attackers to execute arbitrary commands by...
CVE-2025-47212: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS...
The vulnerability of the formexeCommand()/goform/exeCommand function of the cmdinput component in the Tenda AC9 and AC15 microprogrammable routers allows a attacker to execute arbitrary commands.
The vulnerability of the formexeCommand function /goform/exeCommand of the cmdinput component in the Tenda AC9 and AC15 microprogrammed devices lies in the lack of measures to neutralize special elements used in the operating system’s command when processing the path parameter. Exploiting this...
CVE-2025-59740
AndSoft e-TMS v25.03 has an OS command injection vulnerability arising from misuse of the m parameter in /clt/LOGINFRM_CAT.ASP. A crafted POST request can lead to execution of operating system commands on the server. Reported across multiple feeds (CNVD/CNNVD/CVELIST-derived notes; PT-SEC) with n...
CVE-2025-59735
CVE-2025-59735 concerns an operating system command injection in AndSoft’s e-TMS v25.03. The vulnerability arises from the misuse of the POST parameter m in the endpoint /clt/LOGINFRM.ASP , allowing an attacker to execute OS commands on the server. Reported in multiple feeds, the issue is describ...
