14146 matches found
CVE-2025-61984
CVE-2025-61984 affects OpenSSH before 10.1. It allows control characters in usernames originating from untrusted sources (command line or %-sequence expansion in a config file), potentially enabling code execution when a ProxyCommand is used. A config file that provides a complete literal usernam...
PT-2025-40864
Name of the Vulnerable Software and Affected Versions affected versions not specified Description The username and password are sent directly in the URL as parameters within HTTP requests. This practice poses a significant risk of sensitive data disclosure, as URLs may be stored in server logs,...
SICK AG Baggage Analytics 安全漏洞
SICK AG Baggage Analytics is a visualization and analysis software for airport tracking systems from SICK AG, Germany. A security vulnerability exists in SICK AG Baggage Analytics that stems from a different error message being returned on login failure, which could lead to a username enumeration...
PT-2025-40857
Name of the Vulnerable Software and Affected Versions Tenda AC18 version 15.03.05.196318 Description A security issue exists in Tenda AC18 routers. A stack-based buffer overflow can occur due to manipulation of the Username argument within the /goform/fast setting pppoe set file. This issue is...
CVE-2025-61984
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...
UTT 1250GW 安全漏洞
The UTT 1250GW is a wireless router from China Aitai UTT. A security vulnerability exists in UTT 1250GW v2v3.2.2-200710 and earlier versions, which stems from an incorrect manipulation of the parameter Username in the file /goform/formUserStatusRemark, which could result in a buffer overflow...
CVE-2025-11295
A flaw has been found in Belkin F9K1015 1.00.10. This affects an unknown part of the file /goform/formPPPoESetup. This manipulation of the argument pppUserName causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been published and may be used. The vendor was...
CVE-2025-11294
A vulnerability was detected in Belkin F9K1015 1.00.10. Affected by this issue is some unknown functionality of the file /goform/formL2TPSetup. The manipulation of the argument L2TPUserName results in buffer overflow. The attack may be launched remotely. The exploit is now public and may be used...
Belkin F9K1015 安全漏洞
Belkin F9K1015 is a WiFi signal extender from Belkin Canada. A security vulnerability exists in the Belkin F9K1015 version 1.00.10, which stems from incorrect manipulation of the parameter L2TPUserName in the file /goform/formL2TPSetup, which could result in a buffer overflow...
EUVD-2024-1536
Malicious code in bioql PyPI...
EUVD-2024-43400
Malicious code in bioql PyPI...
EUVD-2023-45279
Malicious code in bioql PyPI...
EUVD-2023-38342
Malicious code in bioql PyPI...
EUVD-2021-32808
Malicious code in bioql PyPI...
EUVD-2022-30063
Malicious code in bioql PyPI...
EUVD-2025-23292
Malicious code in bioql PyPI...
EUVD-2025-31576
Malicious code in bioql PyPI...
EUVD-2025-31613
Malicious code in bioql PyPI...