EUVD-2024-31936

Malicious code in bioql PyPI...

EUVD-2023-57481

Malicious code in bioql PyPI...

CVE-2024-3346

A vulnerability was found in Byzoro Smart S80 up to 20240328. It has been declared as critical. This vulnerability affects unknown code of the file /log/webmailattach.php. The manipulation of the argument mailfilepath leads to os command injection. The attack can be initiated remotely. The exploi...

CVE-2024-3346 Byzoro Smart S80 webmailattach.php os command injection

A vulnerability was found in Byzoro Smart S80 up to 20240328. It has been declared as critical. This vulnerability affects unknown code of the file /log/webmailattach.php. The manipulation of the argument mailfilepath leads to os command injection. The attack can be initiated remotely. The exploi...

CVE-2024-3346 Byzoro Smart S80 webmailattach.php os command injection

A vulnerability was found in Byzoro Smart S80 up to 20240328. It has been declared as critical. This vulnerability affects unknown code of the file /log/webmailattach.php. The manipulation of the argument mailfilepath leads to os command injection. The attack can be initiated remotely. The exploi...

CVE-2024-3346

Byzoro Smart S80 (up to 20240328) contains an OS command injection vulnerability in /log/webmailattach.php via the mail_file_path parameter. This can be exploited remotely; the exploit has been disclosed publicly (VDB-259450). Affected product/version information is limited to the Byzoro Smart S8...

PT-2024-25271

Name of the Vulnerable Software and Affected Versions Byzoro Smart S80 up to 20240328 Description A critical issue affects the unknown code of the file /log/webmailattach.php. The manipulation of the mail file path argument leads to os command injection. This issue can be initiated remotely. The...

CVE-2024-3346: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Byzoro Smart S80 up to 20240328. It has been declared as critical. This vulnerability affects unknown code of the file /log/webmailattach.php. The manipulation of the argument mailfilepath leads to os command injection. The attack can be initiated remotely. The exploi...

Design/Logic Flaw

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument tablename leads to an unknown weakness. The attack may be...

CVE-2023-5143

Affected product: D-Link DAR-7000 (up to 20151231). The issue resides in the handling of /log/webmailattach.php, where manipulating the table_name argument leads to a vulnerability. The incident is described as remotely exploitable with public disclosure of the exploit; the product is end-of-life...

CVE-2023-5143 D-Link DAR-7000 webmailattach.php Privilege Escalation

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument tablename leads to an unknown weakness. The attack may be...

CVE-2023-5143: Improper Input Validation

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-7000 up to 20151231. This issue affects some unknown processing of the file /log/webmailattach.php. The manipulation of the argument tablename leads to an unknown weakness. The attack may be...