2228 matches found
PT-2025-41445
Name of the Vulnerable Software and Affected Versions Tenda W12 version 3.0.0.63948 Description A flaw exists in the Tenda W12 device that allows for a null pointer dereference. This issue is located within the wifiScheduledSet function of the HTTP Request Handler component, specifically in the...
PT-2025-41414
Name of the Vulnerable Software and Affected Versions Tenda W12 version 3.0.0.63948 Description A flaw exists in the Tenda W12 router firmware that allows for a remote stack-based buffer overflow. The issue is located in the wifiMacFilterSet function within the HTTP Request Handler component,...
CVE-2025-11444 TOTOLINK N600R HTTP Request cstecgi.cgi setWiFiBasicConfig buffer overflow
A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argument wepkey leads to buffer overflow. It is possible to launc...
CVE-2025-11418: Stack-based Buffer Overflow
A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP Request Handler. The manipulation of the argument mitssidindex leads to stack-based buffer overflow. The attack may be...
CVE-2025-11444: Buffer Copy without Checking Size of Input
A security vulnerability has been detected in TOTOLINK N600R up to 4.3.0cu.7866B20220506. This impacts the function setWiFiBasicConfig of the file /cgi-bin/cstecgi.cgi of the component HTTP Request Handler. Such manipulation of the argument wepkey leads to buffer overflow. It is possible to launc...
EUVD-2021-0890
Malware in sbrugna...
CVE-2025-11291: Improper Neutralization of Input During Web Page Generation
A security flaw has been discovered in ixmaps website2017 up to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0. This impacts an unknown function of the file /map.php of the component HTTP GET Request Handler. Performing manipulation of the argument trid results in cross site scripting. The attack can b...
CVE-2025-11272
A vulnerability has been found in SeriaWei ZKEACMS up to 4.3. This affects the function Delete of the file src/ZKEACMS.Redirection/Controllers/UrlRedirectionController.cs of the component POST Request Handler. The manipulation leads to improper authorization. Remote exploitation of the attack is...
CVE-2025-11272: Improper Authorization
A vulnerability has been found in SeriaWei ZKEACMS up to 4.3. This affects the function Delete of the file src/ZKEACMS.Redirection/Controllers/UrlRedirectionController.cs of the component POST Request Handler. The manipulation leads to improper authorization. Remote exploitation of the attack is...
EUVD-2024-16701
Malicious code in bioql PyPI...
EUVD-2025-18457
Malicious code in bioql PyPI...
EUVD-2025-21208
Malicious code in bioql PyPI...
EUVD-2024-16213
Malicious code in bioql PyPI...
EUVD-2025-17350
Malicious code in bioql PyPI...
EUVD-2025-17094
Malicious code in bioql PyPI...
EUVD-2025-18422
Malicious code in bioql PyPI...
EUVD-2025-22835
Malicious code in bioql PyPI...
EUVD-2025-2007
Malicious code in bioql PyPI...