CVE-2026-7058 666ghj MiroFish Inter-Process Communication simulation_ipc.py SimulationIPCClient.send_command command injection

A vulnerability has been found in 666ghj MiroFish up to 0.1.2. The impacted element is the function SimulationIPCClient.sendcommand of the file backend/app/services/simulationipc.py of the component Inter-Process Communication. Such manipulation leads to command injection. It is possible to launc...

CVE-2023-40353

An issue was discovered in Exynos Mobile Processor 980 and 2100. An integer overflow at a buffer index can prevent the execution of requested services via a crafted application...

EUVD-2020-24604

Malware in sbrugna...

EUVD-2020-24606

Malware in sbrugna...

EUVD-2019-4492

Malware in sbrugna...

EUVD-2016-7360

Malware in sbrugna...

EUVD-2018-1152

Malware in sbrugna...

EUVD-2019-4491

Malware in sbrugna...

EUVD-2014-2236

Malware in sbrugna...

EUVD-2019-1079

Malware in sbrugna...

EUVD-2013-5394

Malware in sbrugna...

EUVD-2021-6863

Malicious code in bioql PyPI...

EUVD-2021-6905

Malicious code in bioql PyPI...

EUVD-2025-28444

Malicious code in bioql PyPI...

EUVD-2021-6860

Malicious code in bioql PyPI...

CVE-2025-52545

E3 Site Supervisor Control firmware version 2.31F01 RCI service contains an API call to read users info, which returns all usernames and password hashes for the application services...

CVE-2025-52547

E3 Site Supervisor Control firmware version 2.31F01 MGW contains an API call that lacks input validation. An attacker can use this command to continuously crash the application services...

CVE-2025-52548

E3 Site Supervisor Control firmware version 2.31F01 contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the...

CVE-2025-52548 Enabling SSH and Shellinabox on the vulnerable machine

E3 Site Supervisor Control firmware version 2.31F01 contains a hidden API call in the application services that enables SSH and Shellinabox, which exist but are disabled by default. An attacker with admin access to the application services can utilize this API to enable remote access to the...

CVE-2025-52547 DoS to the application services

E3 Site Supervisor Control firmware version 2.31F01 MGW contains an API call that lacks input validation. An attacker can use this command to continuously crash the application services...