EUVD-2025-28615

Malicious code in bioql PyPI...

CVE-2025-57105: Improper Neutralization of Special Elements used in a Command

The DI-7400G+ router has a command injection vulnerability, which allows attackers to execute arbitrary commands on the device. The sub478D28 function in in mngplatform.asp, and sub4A12DC function in wayosacserver.asp of the jhttpd program, with the parameter acmngsrvhost...