📄 Redash Authenticated Remote Command Execution

Redash’s default setup uses PostgreSQL superuser credentials for its primary data source. Because users can run SQL through Redash, any authenticated account gains excessive control over the database. This allows executing system commands on the database server through PostgreSQL’s COPY FROM...

JBL LIVE PRO 2 TWS 访问控制错误漏洞

The JBL LIVE PRO 2 TWS is a wireless noise-canceling headset from JBL USA. An access control error vulnerability exists in the JBL LIVE PRO 2 TWS, which stems from a BLE security misconfiguration that could allow a neighboring unauthenticated attacker to read or write device control commands...

PT-2025-50531

Name of the Vulnerable Software and Affected Versions Serendipity version 2.5.0 Description An authenticated administrator can upload malicious PHP files through the media upload functionality, leading to remote code execution. An attacker can create a PHP shell with a command execution form,...

CVE-2023-53774

MiniDVBLinux 5.4 contains a remote code execution vulnerability in the SVDRP protocol that allows remote attackers to send commands to manipulate TV systems. Attackers can send crafted SVDRP commands through the svdrpsend.sh script to execute messages and potentially control the video disk record...

MAL-2025-192427 Malicious code in libxmlussr1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a26137f4b62749b9f491cb82c0c0f9d95f0fa03f7dcd2e8067b39b5de0e005 The package libxmlussr1 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in libxmlussr1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53a26137f4b62749b9f491cb82c0c0f9d95f0fa03f7dcd2e8067b39b5de0e005 The package libxmlussr1 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in libxmljsololo2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf08b4bf0c122f751f82c3c5b909759570d84e47e5059bde5729221ae910a15 The package libxmljsololo2 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192426 Malicious code in libxmljsololo2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ddf08b4bf0c122f751f82c3c5b909759570d84e47e5059bde5729221ae910a15 The package libxmljsololo2 was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-12946

A vulnerability in the speedtest feature of affected NETGEAR Nighthawk routers, caused by improper input validation, can allow attackers on the router's WAN side, using attacker-in-the-middle techniques MiTM to manipulate DNS responses and execute commands when speedtests are run. This issue...

CVE-2025-41693

A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected...

CVE-2025-41693

A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected...

CVE-2025-2296

EDK2 contains a vulnerability in BIOS where an attacker may cause “ Improper Input Validation” by local access. Successful exploitation of this vulnerability could alter control flow in unexpected ways, potentially allowing arbitrary command execution and impacting Confidentiality, Integrity, and...

MAL-2025-192389 Malicious code in libxmljs2qwerty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e288816b28da06174dcb7d9315fb857fc7daf80f81a57de2fbe1b0a3419895 The package libxmljs2qwerty was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in libxmljs2qwerty (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 98e288816b28da06174dcb7d9315fb857fc7daf80f81a57de2fbe1b0a3419895 The package libxmljs2qwerty was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in libxmlfinal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac89e3df77030c41a5f9d5ac7a10bf66dad824ef1d013c47d913be27080f190 The package libxmlfinal2 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192425 Malicious code in libxmlfinal2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cac89e3df77030c41a5f9d5ac7a10bf66dad824ef1d013c47d913be27080f190 The package libxmlfinal2 was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in baidu-oscp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1707ecb3311268a4753a44190db82280e80d16015e5474475863a3e1487aa5c0 The package baidu-oscp was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192424 Malicious code in baidu-oscp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1707ecb3311268a4753a44190db82280e80d16015e5474475863a3e1487aa5c0 The package baidu-oscp was found to contain malicious code. Source: ossf-package-analysis...

Malicious code in do-not-install-this-package-001 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 27c17335ba5378258efc5d22274e8104e45a493eec51d60d0adbeb9c4f627714 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

MAL-2025-192387 Malicious code in do-not-install-this-package-001 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 27c17335ba5378258efc5d22274e8104e45a493eec51d60d0adbeb9c4f627714 Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...