EUVD-2024-24956

Malicious code in bioql PyPI...

Local Code Execution (LCE)

XPixelGroup BasicSR is vulnerable to local code execution. The vulnerability is due to improper handling of a crafted SLURMNODELIST environment variable when executing "scontrol show hostname", allowing crafted input to influence command execution...

CVE-2024-27763

XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostname" is executed in the presence of a crafted SLURMNODELIST environment variable...

CVE-2024-27763

XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostname" is executed in the presence of a crafted SLURMNODELIST environment variable...

CVE-2024-27763

XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostname" is executed in the presence of a crafted SLURMNODELIST environment variable...

CVE-2024-27763

XPixelGroup BasicSR (versions through 1.4.2 ) is vulnerable to local code execution due to a command injection flaw. The root cause is the improper handling of a crafted SLURM_NODELIST environment variable when the software executes the scontrol show hostname command, allowing untrusted input to ...

PT-2025-11079

Name of the Vulnerable Software and Affected Versions: XPixelGroup BasicSR versions 1.4.2 and earlier Description: The issue might locally allow code execution in specific situations where scontrol show hostname is executed with a crafted SLURM NODELIST environment variable. Recommendations: For...

CVE-2024-27763: Improper Neutralization of Special Elements used in a Command

XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostname" is executed in the presence of a crafted SLURMNODELIST environment variable...

CVE-2024-27763

XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostname" is executed in the presence of a crafted SLURMNODELIST environment variable...