EUVD-2024-2761

Malicious code in bioql PyPI...

EUVD-2022-31746

Malicious code in bioql PyPI...

EUVD-2023-29324

Malicious code in bioql PyPI...

EUVD-2023-12248

Malicious code in bioql PyPI...

EUVD-2025-7008

Malicious code in bioql PyPI...

EUVD-2021-31831

Malicious code in bioql PyPI...

EUVD-2024-35239

Malicious code in bioql PyPI...

EUVD-2024-39594

Malicious code in bioql PyPI...

EUVD-2022-31970

Malicious code in bioql PyPI...

EUVD-2025-22042

Malicious code in bioql PyPI...

Denial of Service in CivetWeb

...

CVE-2025-61188

Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This vulnerability allows attackers to upload files with system-whitelisted extensions to the system directory /opt, instead of the /opt/upFiles directory specified by the web server...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the validLogFileName and validExecOutputFileName functions, which insufficiently validate log file names, allowing traversal sequences after certain prefixes. An attacker can access sensitive files on the host...

PT-2025-40652

CVE-2025-61851 - Apache HTTP Server SQL Injection CVE ID : CVE-2025-61851 Published : Oct. 2, 2025, 3:15 a.m. | 1 hour, 58 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2025-40441

CVE-2025-61714 - Apache HTTP Server Unvalidated User Input CVE ID : CVE-2025-61714 Published : Oct. 1, 2025, 3:15 a.m. | 2 hours, 24 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

PT-2025-40445

CVE-2025-61718 - Apache HTTP Server Cross-Site Request Forgery CVE ID : CVE-2025-61718 Published : Oct. 1, 2025, 3:15 a.m. | 2 hours, 24 minutes ago Description : Rejected reason: Not used Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and...

CVE-2025-61188

Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This vulnerability allows attackers to upload files with system-whitelisted extensions to the system directory /opt, instead of the /opt/upFiles directory specified by the web server...

Improper Authentication

esphome is vulnerable to improper authentication. The vulnerability is due to the webserver authentication check incorrectly passing when the client-supplied base64-encoded Authorization value is empty or a substring of the correct value, which allows an attacker to gain unauthorized access to...

CVE-2025-11155

The credentials required to access the device's web server are sent in base64 within the HTTP headers. Since base64 is not considered a strong cipher, an attacker could intercept the web request handling the login and obtain the credentials...

PT-2025-41205

Name of the Vulnerable Software and Affected Versions Tenda CH22 versions prior to 1.0.0.1 Description A security issue exists in Tenda CH22. The formWrlsafeset function within the /goform/AdvSetWrlsafeset file, part of the HTTP Request Handler component, is susceptible to a stack-based buffer...