CVE-2025-71284 Synway SMG Gateway Management Software OS Command Injection via radius_address

Synway SMG Gateway Management Software contains an OS command injection vulnerability in the RADIUS configuration endpoint at /en/9-2radius.php where the radiusaddress POST parameter is split and interpolated directly into a sed command without sanitization. An unauthenticated remote attacker can...

EUVD-2025-31357

Malicious code in bioql PyPI...

CVE-2025-7392

creationtimestamp| type| source ---|---|--- 2025-07-22 14:32:41+00:00| seen| Telegram/v6kJWpie-Dfn8zoL0UhSTWqlpmAegUCy2VWdL66YiUf1-8...

PT-2025-102: Deserialization of untrusted data in FreeScout

The vulnerability was identified in FreeScout, version 1.8.182. The discovered vulnerability allows an attacker to deserialize unsafe data, gain control over application objects and impair its operation. Vulnerability status: Confirmed by vendor Date of vulnerability remediation: 19.07.2025...

CVE-2025-49732

creationtimestamp| type| source ---|---|--- 2025-07-08 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-583/ 2025-07-08 15:56:31+00:00| seen| https://www.thezdi.com/blog/2025/7/8/the-july-2025-security-update-review...

GHSA-H34R-JXQM-QGPR

creationtimestamp| type| source ---|---|--- 2025-07-01 11:09:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/20016...