3589 matches found
EUVD-2025-32460
A flaw has been found in Belkin F9K1015 1.00.10. This affects an unknown part of the file /goform/formPPPoESetup. This manipulation of the argument pppUserName causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was...
CVE-2025-11297
A vulnerability was found in Belkin F9K1015 1.00.10. This issue affects some unknown processing of the file /goform/formSetLanguage. Performing a manipulation of the argument webpage results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public an...
CVE-2025-11293
A security vulnerability has been detected in Belkin F9K1015 1.00.10. Affected by this vulnerability is an unknown functionality of the file /goform/formConnectionSetting. The manipulation of the argument maxConn leads to buffer overflow. The attack may be initiated remotely. The exploit has been...
EUVD-2025-32457
A weakness has been identified in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/formBSSetSitesurvey. Executing manipulation of the argument wanipaddr can lead to command injection. The attack can be launched remotely. The exploit has been made available to the public...
CVE-2025-11292
A weakness has been identified in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/formBSSetSitesurvey. Executing a manipulation of the argument wanipaddr can lead to command injection. The attack can be launched remotely. The exploit has been made available to the publ...
EUVD-2025-32455
A vulnerability was identified in CRMEB up to 5.6.1. This affects an unknown function of the component JWT HMAC Secret Handler. Such manipulation of the argument secret with the input default leads to use of hard-coded cryptographic key . It is possible to launch the attack remotely. Attacks of...
EUVD-2025-32436
A vulnerability was found in LaChatterie Verger up to 1.2.10. This impacts the function redirectToAuthorization of the file /src/main/services/mcp/oauth/provider.ts. The manipulation of the argument URL results in deserialization. The attack can be executed remotely. The exploit has been made...
PT-2025-40824
Name of the Vulnerable Software and Affected Versions Vanderlande Baggage 360 version 7.0.0 Description An issue exists in the processing of files within Vanderlande Baggage 360. Manipulation of the Message argument in the /api-addons/v1/messages API endpoint can lead to cross site scripting. Thi...
PT-2025-40788
Name of the Vulnerable Software and Affected Versions AllStarLink Supermon versions up to 6.2 Description A security issue exists in AllStarLink Supermon, specifically within the AllMon2 component. This issue allows for cross site scripting, and can be triggered remotely. The exploit for this iss...
PT-2025-40800
Name of the Vulnerable Software and Affected Versions samanhappy MCPHub versions up to 0.9.10 Description A flaw exists due to improper authentication within the handleSseConnectionfunction function located in the src/services/sseService.ts file. This issue allows for remote attacks, and a public...
PT-2025-40807
Name of the Vulnerable Software and Affected Versions ixmaps website2017 versions prior to 0c71cffa0162186bc057a76766bc97e9f5a3a2d0 Description A security flaw exists that allows for cross site scripting. The issue is related to the manipulation of the trid argument within an HTTP GET request...
PT-2025-40822
Name of the Vulnerable Software and Affected Versions qianfox FoxCMS versions up to 1.2 Description A cross site scripting issue exists in the Search Page component of qianfox FoxCMS. The issue is located in the /index.php/Search file and involves manipulation of the keyword argument. The exploit...
EUVD-2025-24056
Malicious code in bioql PyPI...
EUVD-2023-32054
Malicious code in bioql PyPI...
EUVD-2025-24106
Malicious code in bioql PyPI...
EUVD-2025-25438
Malicious code in bioql PyPI...
EUVD-2025-28822
Malicious code in bioql PyPI...
EUVD-2024-48730
Malicious code in bioql PyPI...