342 matches found
EUVD-2017-15761
Malware in sbrugna...
EUVD-2019-4881
Malware in sbrugna...
EUVD-2018-0382
Malware in sbrugna...
EUVD-2017-12913
Malware in sbrugna...
EUVD-2016-6813
Malware in sbrugna...
EUVD-2020-27022
Malware in sbrugna...
EUVD-2005-1853
Malware in sbrugna...
EUVD-2017-7848
Malware in sbrugna...
EUVD-2022-15520
Malicious code in bioql PyPI...
EUVD-2023-2925
Malicious code in bioql PyPI...
EUVD-2024-0536
Malicious code in bioql PyPI...
EUVD-2022-52946
Malicious code in bioql PyPI...
EUVD-2022-1412
Malicious code in bioql PyPI...
CVE-2025-57633
A command injection vulnerability in FTP-Flask-python through 5173b68 allows unauthenticated remote attackers to execute arbitrary OS commands. The /ftp.html endpoint's "Upload File" action constructs a shell command from the ftpfile parameter and executes it using os.system without sanitization ...
CVE-2025-30056 Calling system commands via RunCommand
The RunCommand function accepts any parameter, which is then passed for execution in the shell. This allows an attacker to execute arbitrary code on the system...
CVE-2025-30056 Calling system commands via RunCommand
The RunCommand function accepts any parameter, which is then passed for execution in the shell. This allows an attacker to execute arbitrary code on the system...
CVE-2010-20059 FreeNAS < 0.7.2 rev 5543 exec_raw.php Arbitrary Command Execution
FreeNAS 0.7.2 prior to revision 5543 includes an unauthenticated commandâexecution backdoor in its web interface. The execraw.php script exposes a cmd parameter that is passed directly to the underlying shell without sanitation...
CVE-2025-20265
A vulnerability in the RADIUS subsystem implementation of Cisco Secure Firewall Management Center FMC Software could allow an unauthenticated, remote attacker to inject arbitrary shell commands that are executed by the device. This vulnerability is due to a lack of proper handling of user input...
CVE-2012-10046
The E-Mail Security Virtual Appliance ESVA tested on version ESVA2057 contains an unauthenticated command injection vulnerability in the learn-msg.cgi script. The CGI handler fails to sanitize user-supplied input passed via the id parameter, allowing attackers to inject arbitrary shell commands...
CVE-2025-52995
File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. Prior to version 2.33.10, the implementation of the allowlist is erroneous, allowing a user to execute more shell commands than they are authorized fo...