CVE-2025-55423

A command injection vulnerability exists in the upnprelay function in multiple ipTIME router models because the controlURL value used to pass port-forwarding information to an upper router is passed to system without proper validation or sanitization, allowing OS command injection...

Malicious code in controlurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2336df454fde97927b964c01a058e285688f408e96c78eab867567a8aaef7793 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2595 Malicious code in controlurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2336df454fde97927b964c01a058e285688f408e96c78eab867567a8aaef7793 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...