CVE-2025-67109

Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with System privileges...

PT-2025-52856

Name of the Vulnerable Software and Affected Versions Coolify versions prior to 4.0.0-beta.451 Description Coolify is a self-hostable tool for managing servers, applications, and databases. An authenticated command injection issue exists in the File Storage Directory Mount Path functionality. Use...

Eaton xComfort ECI 安全漏洞

The Eaton xComfort ECI is an Ethernet communication interface device from Eaton Corporation USA. A security vulnerability exists in the Eaton xComfort ECI that stems from improper validation of web interface endpoint inputs, which could allow an attacker with network access rights to execute...

ROS-20251223-7311

Module-Scandeps library vulnerability is related to failure to take measures to neutralize special elements used in an operating system command. Exploitation of the vulnerability could allow an attacker to execute arbitrary commands...

CVE-2023-53980

ProjectSend r1605 contains a remote code execution vulnerability that allows attackers to upload malicious files by manipulating file extensions. Attackers can upload shell scripts with disguised extensions through the upload.process.php endpoint to execute arbitrary commands on the server...

Malicious code in cloudy-uvi-sense-v11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff56869fcef2b46c119633fc140a8c99af63e3e4a7e05c5e75f3fc64213dbeb2 The package cloudy-uvi-sense-v11 was found to contain malicious code. Source: ossf-package-analysis...

MAL-2025-192691 Malicious code in cloudy-uvi-sense-v11 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ff56869fcef2b46c119633fc140a8c99af63e3e4a7e05c5e75f3fc64213dbeb2 The package cloudy-uvi-sense-v11 was found to contain malicious code. Source: ossf-package-analysis...

CVE-2025-68335 comedi: pcl818: fix null-ptr-deref in pcl818_ai_cancel()

In the Linux kernel, the following vulnerability has been resolved: comedi: pcl818: fix null-ptr-deref in pcl818aicancel Syzbot identified an issue 1 in pcl818aicancel, which stems from the fact that in case of early device detach via pcl818detach, subdevice dev-readsubdev may not have initialize...

MAL-2025-192688 Malicious code in utif-updated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ed42240868e0b6b0eff870ffa0f42d95bca3659f922078257f1a71694da3f1 The package utif-updated was found to contain malicious code. Source: ghsa-malware 3d854467203e61d8d828eafa2a699ba639c90e4045f0e92f033fdade35096cac A...

Malicious code in utif-updated (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 24ed42240868e0b6b0eff870ffa0f42d95bca3659f922078257f1a71694da3f1 The package utif-updated was found to contain malicious code. Source: ghsa-malware 3d854467203e61d8d828eafa2a699ba639c90e4045f0e92f033fdade35096cac A...

Malicious code in commander-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fe1eb016adcd74c343cd1628168fca4112c383c79d2e8580aa81b80a3d162f The package commander-stable was found to contain malicious code. Source: ghsa-malware d960435ff1d49dae38d3390836ed2ea98d8952b423ab906c750127f7c6bc02...

MAL-2025-192687 Malicious code in commander-stable (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 65fe1eb016adcd74c343cd1628168fca4112c383c79d2e8580aa81b80a3d162f The package commander-stable was found to contain malicious code. Source: ghsa-malware d960435ff1d49dae38d3390836ed2ea98d8952b423ab906c750127f7c6bc02...

CVE-2023-53952

Dotclear 2.25.3 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension through the blog post creation interface. Attackers can upload files containing PHP system commands that execute when the uploaded file is accessed...

CVE-2025-11541

Stack-based Buffer Overflow vulnerability in Sharp Display Solutions projectors allows a attacker may execute arbitrary commands and programs...

EUVD-2025-204695

Stack-based Buffer Overflow vulnerability in Sharp Display Solutions projectors allows a attacker may execute arbitrary commands and programs...

EUVD-2025-204696

Stack-based Buffer Overflow vulnerability in Sharp Display Solutions projectors allows a attacker may execute arbitrary commands and programs...

Sharp NP series 安全漏洞

The Sharp NP series is a series of large format commercial displays from Sharp Japan. A security vulnerability exists in Sharp NP series, which stems from the presence of a stack-based buffer overflow issue that could allow an attacker to execute arbitrary commands and programs...

Malicious code in hooktest-fin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 87e6fba5c0ac4b5359cb360a5dbf68404d0b8559bd94a9f4c33fdad09559b241 During installation, a script to execute remote commands through a Discord bot is installed, ensuring its persistence over reboots --- Category: MALICIOUS - Th...

MAL-2025-192685 Malicious code in hooktest-fin (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 87e6fba5c0ac4b5359cb360a5dbf68404d0b8559bd94a9f4c33fdad09559b241 During installation, a script to execute remote commands through a Discord bot is installed, ensuring its persistence over reboots --- Category: MALICIOUS - Th...

PT-2025-54458

Name of the Vulnerable Software and Affected Versions Cowrie versions prior to 2.9.0 Description Cowrie versions before 2.9.0 have a server-side request forgery SSRF issue in the emulated shell implementations of wget and curl. The default configuration allows these commands to make real outbound...