EUVD-2006-0645

Malware in sbrugna...

EUVD-2008-1988

Malware in sbrugna...

EUVD-2006-3786

Malware in sbrugna...

EUVD-2014-2686

Malware in sbrugna...

EUVD-2008-6431

Malware in sbrugna...

EUVD-2018-18825

Malware in sbrugna...

EUVD-2024-40443

Malicious code in bioql PyPI...

EUVD-2024-25150

Malicious code in bioql PyPI...

EUVD-2024-31517

Malicious code in bioql PyPI...

EUVD-2022-29824

Malicious code in bioql PyPI...

EUVD-2022-48428

Malicious code in bioql PyPI...

EUVD-2024-45745

Malicious code in bioql PyPI...

EUVD-2022-37523

Malicious code in bioql PyPI...

CVE-2025-54289

Privilege Escalation in operations API in Canonical LXD 6.5 on multiple platforms allows attacker with read permissions to hijack terminal or console sessions and execute arbitrary commands via WebSocket connection hijacking format...

CVE-2025-57797

Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command...

CVE-2025-36049 IBM webMethods Integration Sever XML external entity injection

IBM webMethods Integration Server 10.5, 10.7, 10.11, and 10.15 is vulnerable to an XML external entity injection XXE attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to execute arbitrary commands...

CVE-2025-49468

A SQL injection vulnerability in No Boss Calendar component before 5.0.7 for Joomla was discovered. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via the idmodule parameter...

CVE-2024-29167

SVR-116 firmware version 1.6.0.30028871 allows a remote authenticated attacker with an administrative privilege to execute arbitrary OS commands by sending a specially crafted request to the product...

CVE-2023-41724

A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying operating system of the appliance within the same physical or logical network...

CVE-2022-27005

Totolink routers s X5000R V9.1.0u.6118B20201102 and A7000R V9.1.0u.6115B20201022 were discovered to contain a command injection vulnerability in the setWanCfg function via the hostName parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...