EUVD-2024-35015

Malicious code in bioql PyPI...

EUVD-2022-51663

Malicious code in bioql PyPI...

EUVD-2022-29687

Malicious code in bioql PyPI...

EUVD-2023-30382

Malicious code in bioql PyPI...

EUVD-2022-33221

Malicious code in bioql PyPI...

EUVD-2025-30579

Malicious code in bioql PyPI...

EUVD-2023-42810

Malicious code in bioql PyPI...

EUVD-2024-33773

Malicious code in bioql PyPI...

EUVD-2024-50420

Malicious code in bioql PyPI...

EUVD-2022-49401

Malicious code in bioql PyPI...

EUVD-2023-28402

Malicious code in bioql PyPI...

Tenda AC18 Buffer Overflow Vulnerability

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a buffer overflow vulnerability, which originates from the /goform/WizardHandle file not performing effective boundary checking...

CVE-2025-11122

A vulnerability was detected in Tenda AC18 15.03.05.19. This affects an unknown function of the file /goform/WizardHandle. The manipulation of the argument WANT/mtuvalue results in stack-based buffer overflow. The attack can be launched remotely. The exploit is now public and may be used...

Tenda AC18 安全漏洞

Tenda AC18 is a dual-band wireless router launched by Shenzhen Jixiang Tenda Technology Co. in July 2016, mainly for villas and large home users. Tenda AC18 suffers from a buffer overflow vulnerability, which originates from the /goform/WizardHandle file not performing effective boundary checking...

CVE-2025-34227

Nagios XI 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system...

CVE-2025-34227

Nagios XI 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system...

CVE-2025-34227

Nagios XI 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system...

CVE-2025-34227 Nagios XI < 2026R1 Configuration Wizard Authenticated Command Injection

Nagios XI 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system...

PT-2025-39429

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2026R1 Description Nagios XI is susceptible to an authenticated command injection issue present in the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. Successful exploitatio...

CVE-2025-58237

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Niaj Morshed LC Wizard ghl-wizard allows Stored XSS.This issue affects LC Wizard: from n/a through = 2.2.4...