CVE-2025-54545

On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges...

EUVD-2020-3443

Malware in sbrugna...

EUVD-2021-16347

Malware in sbrugna...

EUVD-2019-5556

Malware in sbrugna...

EUVD-2018-7973

Malware in sbrugna...

EUVD-2018-7974

Malware in sbrugna...

EUVD-2021-26538

Malware in sbrugna...

EUVD-2016-5957

Malware in sbrugna...

EUVD-2021-24036

Malware in sbrugna...

EUVD-2016-7788

Malware in sbrugna...

EUVD-2020-17731

Malware in sbrugna...

EUVD-2016-1428

Malware in sbrugna...

EUVD-2022-6224

Malicious code in bioql PyPI...

EUVD-2022-5620

Malicious code in bioql PyPI...

EUVD-2022-49221

Malicious code in bioql PyPI...

EUVD-2022-38826

Malicious code in bioql PyPI...

CVE-2025-36606

Dell Unity, versions 5.5 and prior, contains an OS Command Injection Vulnerability in its svcnfssupport utility. An authenticated attacker could potentially exploit this vulnerability, escaping the restricted shell and execute arbitrary operating system commands with root privileges...

CVE-2025-46116: Execution with Unnecessary Privileges

An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where an authenticated attacker can disable the passphrase requirement for a hidden CLI command !v54! via a management API call and then invoke it t...

CVE-2018-16118

A shell escape vulnerability in /webconsole/APIController in the API Configuration component of Sophos XG firewall 17.0.8 MR-8 allows remote attackers to execute arbitrary OS commands via shell metachracters in the "X-Forwarded-for" HTTP header...

CVE-2018-16117

A shell escape vulnerability in /webconsole/Controller in Admin Portal of Sophos XG firewall 17.0.8 MR-8 allow remote authenticated attackers to execute arbitrary OS commands via shell metacharacters in the "dbName" POST parameter...