EUVD-2021-8111

Malicious code in bioql PyPI...

EUVD-2025-19560

Malicious code in bioql PyPI...

EUVD-2021-8263

Malicious code in bioql PyPI...

EUVD-2021-33930

Malicious code in bioql PyPI...

EUVD-2023-52707

Malicious code in bioql PyPI...

EUVD-2024-46121

Malicious code in bioql PyPI...

EUVD-2023-48633

Malicious code in bioql PyPI...

EUVD-2021-8057

Malicious code in bioql PyPI...

EUVD-2024-32980

Malicious code in bioql PyPI...

EUVD-2023-37537

Malicious code in bioql PyPI...

EUVD-2025-4009

Malicious code in bioql PyPI...

EUVD-2023-42387

Malicious code in bioql PyPI...

EUVD-2023-43943

Malicious code in bioql PyPI...

EUVD-2025-6002

Malicious code in bioql PyPI...

CVE-2025-9972: Improper Neutralization of Special Elements used in an OS Command

Certain models of Industrial Cellular Gateway developed by Planet Technology have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the device...

CVE-2025-3128: Improper Neutralization of Special Elements used in an OS Command

A remote unauthenticated attacker who has bypassed authentication could execute arbitrary OS commands to disclose, tamper with, destroy or delete information in Mitsubishi Electric smartRTU, or cause a denial-of service condition on the product...

CVE-2025-43989: Improper Neutralization of Special Elements used in an OS Command

The /goform/formJsonAjaxReq POST endpoint of Shenzhen Tuoshi NR500-EA RG500UEAABxCOMSLICv3.4.2731.16.43 devices mishandles the settimesetting action with the ntpserver0 parameter, which is used in a system command. By setting a username=admin cookie bypassing normal session checks, an...

CVE-2025-54958: Improper Neutralization of Special Elements used in an OS Command

Powered BLUE 870 versions 0.20130927 and prior contain an OS command injection vulnerability. If this vulnerability is exploited, arbitrary OS commands may be executed on the affected product...

CVE-2025-43979

An issue was discovered on FIRSTNUM JC21A-04 devices through 2.01ME/FN that allows authenticated attackers to execute arbitrary OS system commands with root privileges via crafted payloads to the xmlaction.cgi?method= endpoint...

CVE-2025-41688

CVE-2025-41688 describes a high-privilege RCE via an undocumented method that escapes the LUA sandbox, enabling execution of arbitrary OS commands. Reported impact includes total system compromise with network access as the attack vector and no user interaction required. Affected products noted i...