CVE-2023-25911

The Danfoss AK-EM100 web applications allow for an authenticated user to perform OS command injection through the web application parameters...

EUVD-2015-6416

Malware in sbrugna...

EUVD-2015-6410

Malware in sbrugna...

EUVD-2015-6415

Malware in sbrugna...

EUVD-2023-29800

Malicious code in bioql PyPI...

EUVD-2025-13996

Malicious code in bioql PyPI...

EUVD-2025-25499

Malicious code in bioql PyPI...

EUVD-2023-29799

Malicious code in bioql PyPI...

EUVD-2023-26720

Malicious code in bioql PyPI...

EUVD-2025-25498

Malicious code in bioql PyPI...

EUVD-2023-26721

Malicious code in bioql PyPI...

EUVD-2023-26723

Malicious code in bioql PyPI...

EUVD-2023-26719

Malicious code in bioql PyPI...

EUVD-2023-26722

Malicious code in bioql PyPI...

CISA Releases Three Industrial Control Systems Advisories

CISA released three Industrial Control Systems ICS advisories on August 26, 2025. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-25-238-01 INVT VT-Designer and HMITool ICSA-25-238-03 Schneider Electric Modicon M340...

CVE-2025-41451

Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command 'Command Injection' in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system...

CVE-2025-41452

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions...

CVE-2025-41452

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions...

CVE-2025-41451

Improper neutralization of alarm-to-mail configuration fields used in an OS shell Command 'Command Injection' in Danfoss AK-SM8xxA Series prior to version 4.3.1, leading to a potential post-authenticated remote code execution on an attacked system...

CVE-2025-41452 Post auth nginx configuration injection in Danfoss AK-SM8xxA Series

Post-authenticated external control of system web interface configuration setting vulnerability in Danfoss AK-SM8xxA Series prior to 4.3.1, which could allow for a denial of service attack induced by improper handling of exceptional conditions...