EUVD-2022-31723

Malicious code in bioql PyPI...

EUVD-2024-3557

Malicious code in bioql PyPI...

EUVD-2023-58334

Malicious code in bioql PyPI...

EUVD-2021-9055

Malicious code in bioql PyPI...

EUVD-2021-9053

Malicious code in bioql PyPI...

EUVD-2023-53141

Malicious code in bioql PyPI...

EUVD-2023-45150

Malicious code in bioql PyPI...

EUVD-2024-52202

Malicious code in bioql PyPI...

EUVD-2021-32692

Malicious code in bioql PyPI...

PT-2025-51488

Уязвимость компонента Telnet Service микропрограммного обеспечения беспроводного маршрутизатора WIRELESS-N 300M связана с использованием учетных данных по умолчанию. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнять произвольные команды...

TOTOLINK X6000R Operating System Command Injection Vulnerability

The TOTOLINK X6000R is a wireless router from TOTOLINK. An operating system command injection vulnerability exists in TOTOLINK X6000R V9.4.0cu.1458B20250708 and prior versions, which stems from a failure to properly filter special elements in user input. An attacker can exploit this vulnerability...

DELL Cloud Disaster Recovery OS Command Injection Vulnerability

DELL Cloud Disaster Recovery is a cloud disaster recovery solution provided by Dell Technologies. DELL Cloud Disaster Recovery suffers from an OS command injection vulnerability that stems from improper neutralization of special elements in OS commands, which can be exploited by an attacker to...

CVE-2025-59815

This vulnerability allows malicious actors to execute arbitrary commands on the underlying system of the Zenitel ICX500 and ICX510 Gateway, granting shell access. Exploitation can compromise the device’s availability, confidentiality, and integrity...

CVE-2025-59844

SonarQube Server and Cloud is a static analysis solution for continuous code quality and security inspection. A command injection vulnerability exists in SonarQube GitHub Action in version 4.0.0 to before version 6.0.0 when workflows pass user-controlled input to the args parameter on Windows...

GHSA-5XQ9-5G24-4G6F Argument injection vulnerability in SonarQube Scan Action

A command injection vulnerability exists in SonarQube GitHub Action prior to v6.0.0 when workflows pass user-controlled input to the args parameter on Windows runners without proper validation. This vulnerability bypasses a previous security fix and allows arbitrary command execution, potentially...

CVE-2025-59844: Improper Neutralization of Special Elements used in an OS Command

SonarQube Server and Cloud is a static analysis solution for continuous code quality and security inspection. A command injection vulnerability exists in SonarQube GitHub Action in version 4.0.0 to before version 6.0.0 when workflows pass user-controlled input to the args parameter on Windows...

Cisco NX-OS Command Execution

The vulnerability of the Cisco NX-OS operating system loader for Cisco Nexus and Cisco UCS Fabric Connectors is related to access control violations. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...

Docker Desktop security vulnerabilities

Docker Desktop is a desktop software for lightweight deployment of applications based on container technology from Docker Inc. in the United States. The product provides a desktop environment that supports creating a container lightweight virtual machine and deploying and running applications on...

Vim Path Traversal Command Execution

The vulnerability of the Vim text editor is related to incorrect restrictions on the path to the restricted access directory. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

Vim Path Traversal Command Execution

The vulnerability of the Vim text editor is related to incorrect restrictions on the path to the restricted access directory. Exploiting this vulnerability allows an attacker to execute arbitrary commands...