EUVD-2025-23654

Malicious code in bioql PyPI...

Remote Code Execution (RCE)

github.com/tnborg/panel is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper path handling in the CleanPath middleware from the go-chi/chi package, which fails to process r.URL.Path, followed by flaws in backend login path exposure, which allows an attacker to bypass...

CVE-2025-53534

RatPanel is a server operation and maintenance management panel. In versions 2.3.19 through 2.5.5, when an attacker obtains the backend login path of RatPanel including but not limited to weak default paths, brute-force cracking, etc., they can execute system commands or take over hosts managed b...

CVE-2025-53534 RatPanel can perform remote command execution without authorization

RatPanel is a server operation and maintenance management panel. In versions 2.3.19 through 2.5.5, when an attacker obtains the backend login path of RatPanel including but not limited to weak default paths, brute-force cracking, etc., they can execute system commands or take over hosts managed b...

CVE-2025-53534

CVE-2025-53534 affects RatPanel versions 2.3.19–2.5.5. The vulnerability stems from the CleanPath middleware in github.com/go-chi/chi not properly processing r.URL.Path, enabling an attacker who has backend login access to bypass authentication and execute arbitrary commands or take over hosts wi...

CVE-2025-53534 RatPanel can perform remote command execution without authorization

RatPanel is a server operation and maintenance management panel. In versions 2.3.19 through 2.5.5, when an attacker obtains the backend login path of RatPanel including but not limited to weak default paths, brute-force cracking, etc., they can execute system commands or take over hosts managed b...

RatPanel 安全漏洞

RatPanel RatPanel is an open source server operations management panel from TreeNewBee. A security vulnerability exists in RatPanel versions 2.3.19 through 2.5.5, which stems from the CleanPath middleware's failure to handle r.URL.Path, which could lead to remote code execution and unauthorized...