349 matches found
EUVD-2017-0027
Malware in sbrugna...
EUVD-2024-2345
Malicious code in bioql PyPI...
EUVD-2024-31727
Malicious code in bioql PyPI...
EUVD-2025-14313
Malicious code in bioql PyPI...
EUVD-2024-2360
Malicious code in bioql PyPI...
EUVD-2024-1959
Malicious code in bioql PyPI...
EUVD-2025-6835
Malicious code in bioql PyPI...
EUVD-2023-58738
Malicious code in bioql PyPI...
EUVD-2025-29506
Malicious code in bioql PyPI...
EUVD-2024-0100
Malicious code in bioql PyPI...
Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands
...
Remote Code Execution (RCE)
picklescan is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling of pickle files in UnixSubprocessTransport.start, which allows an attacker to execute arbitrary code by providing a malicious pickle file...
CVE-2025-58763
Tautulli is a Python based monitoring and tracking tool for Plex Media Server. A command injection vulnerability in Tautulli v2.15.3 and prior allows attackers with administrative privileges to obtain remote code execution on the application server. This vulnerability requires the application to...
vulnerable-python-poc-exploit
Отчет по анализу уязвимостей Python приложения vulnerable...
Unintentional exposure of environment variables to subprocesses in sentry-sdk
...
Picklescan is missing detection when calling built-in python library asyncio.unix_events._UnixSubprocessTransport._start
Summary Using asyncio.unixevents.UnixSubprocessTransport.start function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to...
BIT-LIBPYTHON-2023-6507 Groups not dropped before running subprocess when using empty 'extra_groups' parameter
An issue was found in CPython 3.12.0 subprocess module on POSIX platforms. The issue was fixed in CPython 3.12.1 and does not affect other stable releases. When using the extragroups= parameter with an empty list as a value ie extragroups= the logic regressed to not call setgroups0, NULL before...
PT-2025-32492 · Pypi · Ms-Swift
I. Detailed Description: 1. Install ms-swift pip install ms-swift -U 2. Start web-ui swift web-ui --lang en 3. After startup, access through browser at http://localhost:7860/ to see the launched fine-tuning framework program 4. Fill in necessary parameters In the LLM Training interface, fill in...
CVE-2025-34073
An unauthenticated command injection vulnerability exists in stamparm/maltrail Maltrail versions =0.54. A remote attacker can execute arbitrary operating system commands via the username parameter in a POST request to the /login endpoint. This occurs due to unsafe handling of user-supplied input...
PT-2025-27631
Name of the Vulnerable Software and Affected Versions: Maltrail versions =0.54 Description: An unauthenticated command injection issue exists, allowing a remote attacker to execute arbitrary operating system commands via the username parameter in a POST request to the "/login" endpoint. This occu...