LLama Factory Remote OS Command Injection Vulnerability

SummaryA critical remote OS command injection vulnerability has been identified in the Llama Factory training process. This vulnerability arises from improper handling of user input, allowing malicious actors to execute arbitrary OS commands on the host system. The issue is caused by insecure usa...

Admidio 安全漏洞

Admidio is a set of open-source member management systems developed by the Admidio team. This system supports features such as member lists, event management, message boards, photo albums, and downloads. Prior to Admidio 5.0.9, there were security vulnerabilities. These vulnerabilities stemmed fr...

📄 MiniCMS 1.11 Exploitation Toolkit

This toolkit focuses on validating and demonstrating the impact of a known and documented design flaw in MiniCMS 1.11 related to its build process CVE-2018-1000638. MiniCMS relies on an insecure build.php script that blindly packages filesystem contents into install.php without enforcing integrit...

Blurams Flare Camera 安全漏洞

Blurams Flare Camera is a camera from Blurams USA. A security vulnerability exists in Blurams Flare Camera 24.1114.151.929 and earlier versions, which stems from a flaw in the boot process and could lead to the disclosure of sensitive information...

The vulnerability of the child_process function in the MCP-server for managing clusters of virtual machines in Kubernetes allows a attacker to execute arbitrary commands.

The vulnerability of the childprocess function in the MCP-server for managing clusters of virtual machines in Kubernetes is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the software for working with PDF files, UPDF for Windows operating systems, allows a perpetrator to execute arbitrary code.

The vulnerability of UPDF software for working with PDF files on Windows operating systems is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

The vulnerability of the software for working with PDF files, UPDF for Windows operating systems, allows a hacker to execute arbitrary code.

The vulnerability of UPDF software for working with PDF files on Windows operating systems is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

The vulnerability of the software for working with PDF files, UPDF for Windows operating systems, allows a perpetrator to execute arbitrary code.

The vulnerability of UPDF software for working with PDF files on Windows operating systems is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...

CVE-2025-12789

The CVE-2025-12789 issue affects Red Hat Single Sign-On and is an Open Redirect vulnerability during the logout process. The root cause is that the redirect_uri parameter used in the openid-connect logout flow is not properly validated, enabling potential redirection to a malicious URL. Documents...

The vulnerability of the safe_asterisk (/usr/sbin/safe_asterisk) script in the Asterisk telephony management system allows a hacker to elevate their privileges.

The vulnerability of the safeasterisk /usr/sbin/safeasterisk script in the Asterisk IP telephony management system is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to increase their privileges...

EUVD-2013-0921

Malware in sbrugna...

EUVD-2024-31871

Malicious code in bioql PyPI...

EUVD-2021-32634

Malicious code in bioql PyPI...

PT-2025-48445

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon affected versions not specified Description A flaw exists in Qualcomm Snapdragon chipsets related to insufficient input validation during buffer copying. Specifically, a corrupted ELF image with an oversized file size can b...

The vulnerability of the Driver installers component of Microprogramming Software for Intel Network Adapters allows a hacker to execute arbitrary code and enhance their privileges.

The vulnerability of the Driver installers component of Intel Network Adapter microprogramming software is related to an uncontrollable element in the search process. Exploiting this vulnerability allows an attacker to execute arbitrary code and increase their privileges...

The vulnerability of the tools and libraries for working with Intel RealSense SDK cameras is related to an uncontrollable element in the search process, allowing attackers to gain increased privileges.

The vulnerability of the tools and libraries for working with Intel RealSense SDK 3D cameras is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

Studio 3T 安全漏洞

Studio 3T is a native cross-platform MongoDB management tool open-sourced by Studio 3T. A security vulnerability exists in Studio 3T 2025.1.0 and earlier versions, which stems from improper handling of a specially crafted payload by the childprocess module and could lead to arbitrary code executi...

The vulnerability of the Data Loss Prevention module of Trend Micro Apex One and Apex One as a Service allows a perpetrator to execute arbitrary code.

The vulnerability of the Data Loss Prevention module in Trend Micro Apex One and Apex One as a Service antivirus software is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code using a...

The vulnerability of the msg_process() function in TOTOLINK CA600-PoE router microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the msgprocess function in TOTOLINK CA600-PoE router microprogramming software is related to the lack of measures taken at the control level during the processing of the URL parameter. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands by...

CVE-2024-6030

Tesla Model S oFono Unnecessary Privileges Sandbox Escape Vulnerability. This vulnerability allows local attackers to escape the sandbox on affected Tesla Model S vehicles. An attacker must first obtain the ability to execute code within the sandbox on the target system in order to exploit this...