EUVD-2023-42387

Malicious code in bioql PyPI...

EUVD-2021-8111

Malicious code in bioql PyPI...

EUVD-2023-43943

Malicious code in bioql PyPI...

EUVD-2022-44922

Malicious code in bioql PyPI...

EUVD-2023-37537

Malicious code in bioql PyPI...

EUVD-2023-48633

Malicious code in bioql PyPI...

EUVD-2021-8263

Malicious code in bioql PyPI...

EUVD-2024-37352

Malicious code in bioql PyPI...

EUVD-2023-52706

Malicious code in bioql PyPI...

EUVD-2025-19560

Malicious code in bioql PyPI...

CVE-2025-9972: Improper Neutralization of Special Elements used in an OS Command

Certain models of Industrial Cellular Gateway developed by Planet Technology have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the device...

CVE-2025-3128: Improper Neutralization of Special Elements used in an OS Command

A remote unauthenticated attacker who has bypassed authentication could execute arbitrary OS commands to disclose, tamper with, destroy or delete information in Mitsubishi Electric smartRTU, or cause a denial-of service condition on the product...

CVE-2025-43989: Improper Neutralization of Special Elements used in an OS Command

The /goform/formJsonAjaxReq POST endpoint of Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices mishandles the settimesetting action with the ntpserver0 parameter, which is used in a system command. By setting a username=admin cookie bypassing normal session checks, an...

CVE-2025-54958: Improper Neutralization of Special Elements used in an OS Command

Powered BLUE 870 versions 0.20130927 and prior contain an OS command injection vulnerability. If this vulnerability is exploited, arbitrary OS commands may be executed on the affected product...

CVE-2025-43979

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN that allows authenticated attackers to execute arbitrary OS system commands with root privileges via crafted payloads to the xmlaction.cgi?method= endpoint...

CVE-2025-41688

CVE-2025-41688 describes a high-privilege RCE via an undocumented method that escapes the LUA sandbox, enabling execution of arbitrary OS commands. Reported impact includes total system compromise with network access as the attack vector and no user interaction required. Affected products noted i...

CVE-2025-41688: Improper Isolation or Compartmentalization

A high privileged remote attacker can execute arbitrary OS commands using an undocumented method allowing to escape the implemented LUA sandbox...

PT-2025-29234

Name of the Vulnerable Software and Affected Versions: TOTOLINK N300RB firmware versions 8.54 Description: A hidden remote support feature, protected by a static secret, allows an authenticated attacker to execute arbitrary OS commands with root privileges. Recommendations: At the moment, there i...

CVE-2025-7145 TeamT5｜ThreatSonar Anti-Ransomware - OS Command Injection

ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitrary OS commands and execute them on the server, thereby gaining administrative access to the remote host...

CVE-2025-48501: Improper Neutralization of Special Elements used in an OS Command

An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, an arbitrary OS commands may be executed on the server where the product is running...