CVE-2016-15047

CVE-2016-15047 (AVTECH CloudSetup.cgi): Authenticated OS command injection via the exefile parameter in CloudSetup.cgi. The parameter is passed to system command execution without proper validation/whitelisting, enabling an authenticated attacker to run arbitrary commands as root and potentially ...

CVE-2016-15047 AVTECH CloudSetup.cgi Authenticated Command Injection

AVTECH devices that include the CloudSetup.cgi management endpoint are vulnerable to authenticated OS command injection. The exefile parameter in CloudSetup.cgi is passed to the underlying system command execution without proper validation or whitelisting. An authenticated attacker who can invoke...

EUVD-2025-33278

CCleaner v5.33.6162 and CCleaner Cloud v1.07.3191 32-bit builds contained a malicious pre-entry-point loader that diverts execution from scrtcommonmainseh into a custom loader. That loader decodes an embedded blob into shellcode, allocates executable heap memory, resolves Windows API functions at...

EUVD-2019-9488

Malware in sbrugna...

EUVD-2018-1980

Malware in sbrugna...

EUVD-2014-7453

Malware in sbrugna...

EUVD-2009-1563

Malware in sbrugna...

EUVD-2023-33633

Malicious code in bioql PyPI...

EUVD-2025-30258

Malicious code in bioql PyPI...

EUVD-2023-1516

Malicious code in bioql PyPI...

EUVD-2022-5248

Malicious code in bioql PyPI...

EUVD-2025-31637

Malicious code in bioql PyPI...

EUVD-2025-3975

Malicious code in bioql PyPI...

EUVD-2025-30807

Malicious code in bioql PyPI...

EUVD-2025-30252

Malicious code in bioql PyPI...

EUVD-2023-49642

Malicious code in bioql PyPI...

EUVD-2025-30259

Malicious code in bioql PyPI...

CVE-2025-34207

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786 VA and SaaS deployments configure the SSH client within Docker instances with the following options: UserKnownHostsFile=/dev/null, StrictHostKeyChecking=no, and ForwardAgent yes. These...

CVE-2025-34207

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786 VA and SaaS deployments configure the SSH client within Docker instances with the following options: UserKnownHostsFile=/dev/null, StrictHostKeyChecking=no, and ForwardAgent yes. These...

CVE-2025-34207

Vasion Print formerly PrinterLogic Virtual Appliance Host prior to 22.0.1049 and Application prior to 20.0.2786 VA and SaaS deployments configure the SSH client within Docker instances with the following options: UserKnownHostsFile=/dev/null, StrictHostKeyChecking=no, and ForwardAgent yes. These...