EUVD-2022-40505

Malicious code in bioql PyPI...

EUVD-2024-31514

Malicious code in bioql PyPI...

EUVD-2022-45554

Malicious code in bioql PyPI...

EUVD-2022-29876

Malicious code in bioql PyPI...

EUVD-2022-6555

Malicious code in bioql PyPI...

EUVD-2022-0815

Malicious code in bioql PyPI...

EUVD-2023-36927

Malicious code in bioql PyPI...

EUVD-2025-31157

Malicious code in bioql PyPI...

EUVD-2024-54859

Malicious code in bioql PyPI...

EUVD-2023-39944

Malicious code in bioql PyPI...

EUVD-2023-28535

Malicious code in bioql PyPI...

EUVD-2023-55179

Malicious code in bioql PyPI...

EUVD-2023-44791

Malicious code in bioql PyPI...

EUVD-2022-35839

Malicious code in bioql PyPI...

EUVD-2022-44271

Malicious code in bioql PyPI...

EUVD-2025-15971

Malicious code in bioql PyPI...

EUVD-2024-35116

Malicious code in bioql PyPI...

Arbitrary Command Injection

Overview figma-developer-mcp is a Give your coding agent access to your Figma data. Implement designs in any framework in one-shot. Affected versions of this package are vulnerable to Arbitrary Command Injection via the childprocess.exec call using unvalidated user input directly within...

DELL Cloud Disaster Recovery OS Command Injection Vulnerability

DELL Cloud Disaster Recovery is a cloud disaster recovery solution provided by Dell Technologies. DELL Cloud Disaster Recovery suffers from an OS command injection vulnerability that stems from improper neutralization of special elements in OS commands, which can be exploited by an attacker to...

TOTOLINK X6000R Operating System Command Injection Vulnerability

The TOTOLINK X6000R is a wireless router from TOTOLINK. An operating system command injection vulnerability exists in TOTOLINK X6000R V9.4.0cu.1458B20250708 and prior versions, which stems from a failure to properly filter special elements in user input. An attacker can exploit this vulnerability...