CVE-2025-60360

CVE-2025-60360 affects radare2 up to v5.9.8, where a memory leak in r2r_subprocess_init is reported. Multiple connected advisories (Ubuntu USN-7915-1, OSV, RH) describe the issue as memory leaks that could enable denial of service, with CVSSv3.1 metrics indicating a local attack vector, low attac...

CVE-2025-60360

radare2 v5.9.8 and before contains a memory leak in the function r2rsubprocessinit...

EUVD-2000-0268

Malware in sbrugna...

EUVD-2020-0028

Malware in sbrugna...

EUVD-2017-0027

Malware in sbrugna...

EUVD-2024-0100

Malicious code in bioql PyPI...

EUVD-2024-2345

Malicious code in bioql PyPI...

EUVD-2023-58738

Malicious code in bioql PyPI...

EUVD-2025-14313

Malicious code in bioql PyPI...

EUVD-2024-31727

Malicious code in bioql PyPI...

EUVD-2025-29506

Malicious code in bioql PyPI...

EUVD-2025-6835

Malicious code in bioql PyPI...

EUVD-2024-1959

Malicious code in bioql PyPI...

EUVD-2024-2360

Malicious code in bioql PyPI...

Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands

...

Remote Code Execution (RCE)

picklescan is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling of pickle files in UnixSubprocessTransport.start, which allows an attacker to execute arbitrary code by providing a malicious pickle file...

CVE-2025-58763

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. A command injection vulnerability in Tautulli v2.15.3 and prior allows attackers with administrative privileges to obtain remote code execution on the application server. This vulnerability requires the application to...

vulnerable-python-poc-exploit

Отчет по анализу уязвимостей Python приложения vulnerable...

Unintentional exposure of environment variables to subprocesses in sentry-sdk

...

Picklescan is missing detection when calling built-in python library asyncio.unix_events._UnixSubprocessTransport._start

Summary Using asyncio.unixevents.UnixSubprocessTransport.start function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to...