CLEANSTART-2026-TQ25238 On Unix systems, opening a file in an os

Security vulnerability affects the argo-cd package. On Unix systems, opening a file in an os...

CLEANSTART-2026-SL66487 On Unix systems, opening a file in an os

Security vulnerability affects the minio-operator package. On Unix systems, opening a file in an os...

EUVD-2025-210292

picklescan before 0.0.25 fails to detect malicious pickle files that use timeit.timeit in the reduce method, allowing remote code execution. Attackers can craft pickle files that import dangerous libraries like os and execute arbitrary system commands, which evade picklescan detection and execute...

CVE-2026-22208

OpenS100 the reference implementation S-100 viewer prior to commit 753cf29 contains a remote code execution vulnerability via an unrestricted Lua interpreter. The Portrayal Engine initializes Lua using luaLopenlibs without sandboxing or capability restrictions, exposing standard libraries such as...

CVE-2026-22208

OpenS100 the reference implementation S-100 viewer prior to commit 753cf29 contains a remote code execution vulnerability via an unrestricted Lua interpreter. The Portrayal Engine initializes Lua using luaLopenlibs without sandboxing or capability restrictions, exposing standard libraries such as...

CVE-2014-2967

Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server...

CVE-2014-2967

Autodesk VRED Pro 2014 (before SR1 SP8) is affected by an unauthenticated remote code execution via the built‑in web server’s Python API. An attacker can remotely execute arbitrary code by sending commands through the exposed Python API (using the os library) on the server (port 8888). Impact is ...

PT-2014-4989

Name of the Vulnerable Software and Affected Versions Autodesk VRED Professional 2014 versions before SR1 SP8 Description The issue allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server. Recommendations For Autodesk VRED...

CVE-2014-2967: Improper Neutralization of Special Elements used in an OS Command

Autodesk VRED Professional 2014 before SR1 SP8 allows remote attackers to execute arbitrary code via Python os library calls in Python API commands to the integrated web server...