34825 matches found
CVE-2025-12763
pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems. This issue is caused by the use of shell=True during backup and restore operations, enabling attackers to execute arbitrary system commands by providing specially crafted file path input...
CVE-2025-12763 Command injection vulnerability allowing arbitrary command execution on Windows
pgAdmin 4 versions up to 9.9 are affected by a command injection vulnerability on Windows systems. This issue is caused by the use of shell=True during backup and restore operations, enabling attackers to execute arbitrary system commands by providing specially crafted file path input...
CVE-2025-12763
CVE-2025-12763 affects pgAdmin 4 versions up to 9.9 on Windows, where a command-injection vulnerability is caused by using shell=True during backup/restore operations, enabling an attacker to execute arbitrary system commands via crafted file paths. Multiple independent sources note this can lead...
EUVD-2025-163786
Supermicro BMC Insyde SMASH shell program has a stacked-based overflow vulnerability...
CVE-2025-7704 Supermicro BMC SMASH services has a Stack-based buffer overflow vulnerability
Supermicro BMC Insyde SMASH shell program has a stacked-based overflow vulnerability...
CVE-2025-7704
CVE-2025-7704 describes a stack-based overflow in the Insyde SMASH shell used by Supermicro BMC. The issue affects the SMASH service component on Supermicro BMC, with the underlying cause identified as a stack-based buffer overflow in the shell. Public descriptions consistently reference a potent...
EUVD-2025-176475
Malicious code in sed-node-shell-long-authorize npm...
Malicious code in emulate-link-shell-async-double (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bf2c1b630e620fe1fa496bedbb43c8e83b304ef52edb5caa9ecd63d1dfbb13b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-189233 Malicious code in rho-object-test-char-shell (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e9efa550c99c9e9618cc08596bdd81ee7ec3ef19c63291d58ac245ccc618c3d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176392
Malicious code in short-shell-data-private-bash npm...
EUVD-2025-175661
Malicious code in warn-shell-async-virtualize-mu npm...
EUVD-2025-176642
Malicious code in rho-object-test-char-shell npm...
EUVD-2025-176406
Malicious code in shell-double-gamma-shell-kappa npm...
EUVD-2025-176403
Malicious code in shell-process-eta-star-omicron npm...
EUVD-2025-180149
Malicious code in bad-hash-shell-interpret-compress npm...
EUVD-2025-180081
Malicious code in big-data-shell-omega-reject npm...
EUVD-2025-176407
Malicious code in shell-class-encrypt-info-zeta npm...
EUVD-2025-178595
Malicious code in hash-warn-async-private-shell npm...