EUVD-2025-19572

Malicious code in bioql PyPI...

Multiple vulnerabilities in TB-eye network recorders and AHD recorders

Overview Network recorders and AHD recorders provided by TB-eye Ltd. contain multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2025-36529 Classic buffer overflow CWE-120 - CVE-2025-41418 Chuya Hayakawa and Ryo Kamino of 00One, Inc. reported these vulnerabilities to JPCERT/C...

CVE-2025-41418

Buffer Overflow vulnerability exists in multiple versions of TB-eye network recorders and AHD recorders. The CGI process may be terminated abnormally by processing a specially crafted request...

CVE-2025-36529

An OS command injection issue exists in multiple versions of TB-eye network recorders and AHD recorders. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who is logging in to the device...

CVE-2025-36529

An OS command injection issue exists in multiple versions of TB-eye network recorders and AHD recorders. If this vulnerability is exploited, an arbitrary OS command may be executed by an attacker who is logging in to the device...

PT-2025-27049 · Unknown · Ahd Recorders +1

Name of the Vulnerable Software and Affected Versions: TB-eye network recorders affected versions not specified AHD recorders affected versions not specified Description: A problem of injection of system operating system commands exists in the mentioned devices. If this issue is exploited, an...