CVE-2023-25184

Use of weak credentials exists in Seiko Solutions SkyBridge and SkySpider series, which may allow a remote unauthenticated attacker to decrypt password for the WebUI of the product. Affected products and versions are as follows: SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier, SkyBridge BASI...

CVE-2023-25070

Cleartext transmission of sensitive information exists in SkyBridge MB-A100/110 firmware Ver. 4.2.0 and earlier. If the telnet connection is enabled, a remote unauthenticated attacker may eavesdrop on or alter the administrator's communication to the product...

EUVD-2025-28570

Malicious code in bioql PyPI...

EUVD-2022-39266

Malicious code in bioql PyPI...

EUVD-2022-39265

Malicious code in bioql PyPI...

EUVD-2023-27984

Malicious code in bioql PyPI...

EUVD-2022-39264

Malicious code in bioql PyPI...

EUVD-2023-26603

Malicious code in bioql PyPI...

EUVD-2023-29148

Malicious code in bioql PyPI...

EUVD-2023-26524

Malicious code in bioql PyPI...

EUVD-2023-27678

Malicious code in bioql PyPI...

EUVD-2023-28601

Malicious code in bioql PyPI...

EUVD-2022-39263

Malicious code in bioql PyPI...

EUVD-2023-29049

Malicious code in bioql PyPI...

EUVD-2023-29051

Malicious code in bioql PyPI...

EUVD-2023-27989

Malicious code in bioql PyPI...

EUVD-2022-39262

Malicious code in bioql PyPI...

CVE-2025-54857

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier. If exploited, a remote unauthenticated attacker may execute arbitrary OS commands with root privileges...

Seiko Solutions SkyBridge BASIC MB-A130 vulnerable to OS command injection

Overview SkyBridge BASIC MB-A130 provided by Seiko Solutions Inc. contains the following vulnerability. OS command injection CWE-78 - CVE-2025-54857 Tsutomu Aramaki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

CVE-2025-54857

Improper neutralization of special elements used in an OS command 'OS Command Injection' issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 and earlier. If exploited, a remote unauthenticated attacker may execute arbitrary OS commands with root privileges...