EUVD-2024-21216

Malicious code in bioql PyPI...

EUVD-2025-19423

Malicious code in bioql PyPI...

EUVD-2024-16466

Malicious code in bioql PyPI...

EUVD-2022-4393

Malicious code in bioql PyPI...

EUVD-2023-47621

Malicious code in bioql PyPI...

EUVD-2023-36044

Malicious code in bioql PyPI...

EUVD-2022-31542

Malicious code in bioql PyPI...

QNAP operating system 操作系统命令注入漏洞

The QNAP operating system is an operating system from Taiwan, China-based QNAP Technology QNAP. An operating system command injection vulnerability exists in the QNAP operating system, which can be exploited to execute arbitrary commands after a remote attacker obtains an administrator account...

CVE-2025-54289

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

Security update for bluez

This update for bluez fixes the following issues: CVE-2023-45866: Fixed unauthorized HID device connections allowing keystroke injection and arbitrary commands execution bsc1217877 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate...

PT-2025-40040

All versions of the package check-branches are vulnerable to Command Injection. check-branches is a command-line tool that is interacted with locally, or via CI, to confirm no conflicts exist in git branches. However, the library follows these conventions which can be abused: 1. It trusts branch...

CVE-2025-36245

IBM InfoSphere 11.7.0.0 through 11.7.1.6 Information Server could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input...

PT-2025-39911

Name of the Vulnerable Software and Affected Versions IBM InfoSphere versions 11.7.0.0 through 11.7.1.6 Description The software contains a flaw that may allow an authenticated user to execute arbitrary commands with elevated privileges on the system. This is due to improper validation of...

PublicCMS 安全漏洞

PublicCMS is an open source content management system CMS written in Java language by PublicCMS China. A security vulnerability exists in PublicCMS PublicCMS-V5.202506.a version and PublicCMS-V5.202506.b version, which stems from incorrect manipulation of the DATABASE, USERNAME, or PASSWORD...

CVE-2025-59817

This vulnerability allows attackers to execute arbitrary commands on the underlying system. Because the web portal runs with root privileges, successful exploitation grants full control over the device, potentially compromising its availability, confidentiality, and integrity...

CVE-2025-10540

iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information such as...

CVE-2025-34227

Nagios XI 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system...

CVE-2025-34227

Nagios XI 2026R1 is vulnerable to an authenticated command injection vulnerability within the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. It is possible to inject shell characters into arguments provided to the service and execute arbitrary system...

CVE-2025-10540

iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information such as...

PT-2025-39429

Name of the Vulnerable Software and Affected Versions Nagios XI versions prior to 2026R1 Description Nagios XI is susceptible to an authenticated command injection issue present in the MongoDB Database, MySQL Query, MySQL Server, Postgres Server, and Postgres Query wizards. Successful exploitatio...