DataEase 2.10.4-2.10.7 - Remote Code Execution

DataEase prior to version 2.10.8 contains a remote code execution caused by insecure backend JDBC link handling, letting authenticated users execute arbitrary code, exploit requires user authentication. id: CVE-2025-32966 info: name: DataEase 2.10.4-2.10.7 - Remote Code Execution author: ChrisJr4...

EUVD-2025-16788

Malicious code in bioql PyPI...

CVE-2025-32966

creationtimestamp| type| source ---|---|--- 2025-04-23 16:17:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114388177097060487 2025-04-23 17:19:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnipar5enh2u 2026-05-02 17:34:43+00:00| confirmed|...

CVE-2025-32966 Dataease H2 JDBC Connection Remote Code Execution

DataEase is an open-source BI tool alternative to Tableau. Prior to version 2.10.8, authenticated users can complete RCE through the backend JDBC link. This issue has been patched in version 2.10.8...