CVE-2025-60360

The radare2 framework versions v5.9.8 and before are vulnerable to a memory leak within the r2r_subprocess_init function. This flaw could potentially be exploited by an attacker to cause a denial of service (DoS). While specific remediation instructions are not provided in the documentation, the ...

Radare2 security vulnerabilities

Radare2 is a Libre reverse framework for Unix geeks open-sourced by Radare. A security vulnerability exists in radare2 version 5.9.8 and earlier, which stems from a memory leak in the r2rsubprocessinit function...

CVE-2025-60360

radare2 v5.9.8 and before contains a memory leak in the function r2rsubprocessinit...

CVE-2025-60360

radare2 v5.9.8 and before contains a memory leak in the function r2rsubprocessinit...

PT-2025-42602

Name of the Vulnerable Software and Affected Versions radare2 versions prior to 5.9.9 Description The software contains a memory leak within the r2r subprocess init function. This issue affects the Radare2 reverse engineering framework. Recommendations Update to version 5.9.9 or later...

EUVD-2020-0028

Malware in sbrugna...

EUVD-2017-0027

Malware in sbrugna...

EUVD-2000-0268

Malware in sbrugna...

EUVD-2025-14313

Malicious code in bioql PyPI...

EUVD-2024-2345

Malicious code in bioql PyPI...

EUVD-2025-6835

Malicious code in bioql PyPI...

EUVD-2025-29506

Malicious code in bioql PyPI...

EUVD-2024-31727

Malicious code in bioql PyPI...

EUVD-2024-1959

Malicious code in bioql PyPI...

EUVD-2023-58738

Malicious code in bioql PyPI...

EUVD-2024-2360

Malicious code in bioql PyPI...

EUVD-2024-0100

Malicious code in bioql PyPI...

Bazaar through 2.7.0, when Subprocess SSH is used, allows remote attackers to execute arbitrary commands

...

Remote Code Execution (RCE)

picklescan is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling of pickle files in UnixSubprocessTransport.start, which allows an attacker to execute arbitrary code by providing a malicious pickle file...

CVE-2025-58763

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. A command injection vulnerability in Tautulli v2.15.3 and prior allows attackers with administrative privileges to obtain remote code execution on the application server. This vulnerability requires the application to...