1071 matches found
EUVD-2023-36865
Malicious code in bioql PyPI...
EUVD-2021-8133
Malicious code in bioql PyPI...
EUVD-2023-50528
Malicious code in bioql PyPI...
EUVD-2023-26444
Malicious code in bioql PyPI...
EUVD-2023-32086
Malicious code in bioql PyPI...
EUVD-2022-1130
Malicious code in bioql PyPI...
EUVD-2022-0919
Malicious code in bioql PyPI...
EUVD-2021-32563
Malicious code in bioql PyPI...
EUVD-2024-39428
Malicious code in bioql PyPI...
EUVD-2022-0909
Malicious code in bioql PyPI...
EUVD-2023-42135
Malicious code in bioql PyPI...
EUVD-2023-46314
Malicious code in bioql PyPI...
CVE-2025-59741
AndSoft e-TMS v25.03 suffers an OS command injection that can be triggered by sending a POST request to /CLT/LOGINERRORFRM.ASP with the m parameter. Multiple connected sources (CNVD-2025-23538, NVD/CVE-2025-59741, CNNVD-202510-331, PT-2025-40361) confirm the vulnerability exists and that an attac...
CVE-2025-34184 Ilevia EVE X1 Server 4.7.18.0.eden Neuro-Core Unauthenticated Code Injection
Ilevia EVE X1 Server version ≤ 4.7.18.0.eden contains an unauthenticated OS command injection vulnerability in the /ajax/php/login.php script. Remote attackers can execute arbitrary system commands by injecting payloads into the 'passwd' HTTP POST parameter, leading to full system compromise or...
CVE-2025-10358 Wavlink WL-WN578W2 wireless.cgi sub_404850 os command injection
A security vulnerability has been detected in Wavlink WL-WN578W2 221110. This affects the function sub404850 of the file /cgi-bin/wireless.cgi. The manipulation of the argument deletelist leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed publicly...
Linux Distros Unpatched Vulnerability : CVE-2023-45158
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An OS command injection vulnerability exists in web2py 2.24.1 and earlier. When the product is configured to use notifySendHandler for logging not the default...
PT-2025-36562
SAP NetWeaver and Affected Versions SAP NetWeaver versions 5.3 through 10.0 SAP NetWeaver AS Java affected versions not specified Description SAP NetWeaver contains a critical deserialization flaw in the RMI-P4 module. This allows an unauthenticated attacker to execute arbitrary operating system...
PT-2025-34975
Name of the Vulnerable Software and Affected Versions: SS1 versions 16.0.0.10 and earlier SS1 Media versions 16.0.0a and earlier Description: SS1 versions 16.0.0.10 and earlier Media version 16.0.0a and earlier allow a remote, unauthenticated attacker to upload arbitrary files and execute OS...
CVE-2025-8943 Unsupervised OS command execution leads to remote code execution by unauthenticated network attackers
The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. However, Flowise's inherent authentication and authorization model is minimal and lacks role-based access controls RBAC. Furthermore, in Flowise versions before 3.0.1 the...
