EUVD-2025-28385

Malicious code in bioql PyPI...

CVE-2025-5106: Improper Neutralization of Special Elements used in an OS Command

A vulnerability was found in Fujian Kelixun 1.0. It has been classified as critical. This affects an unknown part of the file /app/fax/faxview.php of the component Filename Handler. The manipulation of the argument faxfile leads to os command injection. It is possible to initiate the attack...