EUVD-2023-34704

Malicious code in bioql PyPI...

EUVD-2025-25021

Malicious code in bioql PyPI...

EUVD-2022-0982

Malicious code in bioql PyPI...

EUVD-2024-53877

Malicious code in bioql PyPI...

Alex Ryan: From zero chill to quiet confidence

Welcome to another episode of Humans of Talos, our ongoing video interview series that celebrates the people powering Cisco's threat intelligence efforts. In each episode, we dive deep into the personal journeys, motivations and lessons learned from the team members who help keep the internet saf...

Linux Distros Unpatched Vulnerability : CVE-2023-45925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function xerrorhandler at tty/x11conn.c. NOTE: this is...

CVE-2025-54473

An authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla was discovered. The issue allows code execution via the unzip feature...

phoc commander, varios,

Update to latest secure version https://www.phoca.cz/news/1384-phoca-commander-version-5-0-2-and-4-0-1-released...

CVE-2025-54473

An authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla was discovered. The issue allows code execution via the unzip feature...

CVE-2025-54473 Extension - phoca.cz - Authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla

An authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla was discovered. The issue allows code execution via the unzip feature...

CVE-2025-54473

CVE-2025-54473 is an authenticated remote code execution flaw in Phoca Commander for Joomla, affecting versions 1.0.0–4.0.0 and 5.0.0–5.0.1. The issue arises from the unzip feature, enabling code execution after authentication. The CVSSv4 base score is 9.2 (CRITICAL) with high impact to confident...

CVE-2025-54473 Extension - phoca.cz - Authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla

An authenticated RCE vulnerability in Phoca Commander component 1.0.0-4.0.0 and 5.0.0-5.0.1 for Joomla was discovered. The issue allows code execution via the unzip feature...

PT-2025-33480 · Unknown · Phoca Commander

Name of the Vulnerable Software and Affected Versions: Phoca Commander versions 1.0.0 through 4.0.0 Phoca Commander versions 5.0.0 through 5.0.1 Description: An authenticated remote code execution issue exists in Phoca Commander for Joomla. The issue allows code execution via the unzip feature...

Malicious code in commander-js (npm)

The package commander-js was found to contain malicious code...

Malicious code in commmander (npm)

The package commmander was found to contain malicious code...

Malicious code in bytel-tag-commander (npm)

The package bytel-tag-commander was found to contain malicious code...

MAL-2025-17408 Malicious code in commander-js (npm)

The package commander-js was found to contain malicious code...

MAL-2025-16410 Malicious code in bytel-tag-commander (npm)

The package bytel-tag-commander was found to contain malicious code...

WordPress Selling Commander for WooCommerce plugin <= 1.2.46 - Privilege Escalation vulnerability

Privilege Escalation vulnerability discovered by ch4r0n in WordPress Plugin Selling Commander for WooCommerce versions = 1.2.46...

CVE-2024-34534

A SQL injection vulnerability in Cybrosys Techno Solutions Text Commander module aka textcommander 16.0 through 16.0.1 allows a remote attacker to gain privileges via the data parameter to models/irmodel.py:IrModel::chechmodel...