EUVD-2025-26142

Malicious code in bioql PyPI...

CVE-2025-34160: Improper Neutralization of Special Elements used in an OS Command

AnyShare contains a critical unauthenticated remote code execution vulnerability in the ServiceAgent API exposed on port 10250. The endpoint /api/ServiceAgent/startservice accepts user-supplied input via POST and fails to sanitize command-like payloads. An attacker can inject shell syntax that is...