EUVD-2025-17399

Malicious code in bioql PyPI...

EUVD-2024-48955

Malicious code in bioql PyPI...

EUVD-2025-10281

Malicious code in bioql PyPI...

EUVD-2023-46275

Malicious code in bioql PyPI...

EUVD-2021-32400

Malicious code in bioql PyPI...

EUVD-2021-32298

Malicious code in bioql PyPI...

EUVD-2025-15698

Malicious code in bioql PyPI...

EUVD-2025-14171

Malicious code in bioql PyPI...

EUVD-2023-0100

Malicious code in bioql PyPI...

EUVD-2023-0569

Malicious code in bioql PyPI...

PT-2025-35469

Name of the Vulnerable Software and Affected Versions: D-Link DI-7400G+ version 19.12.25A1 Description: A security flaw exists in the D-Link DI-7400G+ router. The issue is located in the sub 478D28 function of the /mng platform.asp file. Manipulation of the addr argument with the input echo 12345...

CVE-2025-44179

Hitron CGNF-TWN 3.1.1.43-TWN-pre3 contains a command injection vulnerability in the telnet service. The issue arises due to improper input validation within the telnet command handling mechanism. An attacker can exploit this vulnerability by injecting arbitrary commands through the telnet interfa...

CVE-2025-29516

CVE-2025-29516 affects D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230. A command injection flaw exists in the backup function, enabling execution of arbitrary commands. CVSS 3.1 base metrics indicate Network attack vector, high impact on confidentiality, integrity, and availability, wi...

CVE-2025-55590

TOTOLINK A3002R v4.0.0-B20230531.1404 was discovered to contain an command injection vulnerability via the component bupload.html...

CVE-2024-58255

EnzoH has an OS command injection vulnerability. Successful exploitation of this vulnerability may lead to arbitrary command execution...

CVE-2025-8655

Kenwood DMX958XR libSystemLib Command injection Remote Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DMX958XR devices. Authentication is not required to exploit this vulnerability. The specific...

CVE-2012-10033 Narcissus backend.php Image Configuration Command Injection

Narcissus is vulnerable to remote code execution via improper input handling in its image configuration workflow. Specifically, the backend.php script fails to sanitize the release parameter before passing it to the configureimage function. This function invokes PHP’s passthru with the unsanitize...

Trend Micro Apex One Console Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Apex One. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Apex One console, which listens on TCP ports 8080 and 4343 by default. The issu...

D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability

D-Link DCS-2530L and DCS-2670L devices contains a command injection vulnerability in the cgi-bin/ddnsenc.cgi. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users should discontinue product utilization...

Linux Distros Unpatched Vulnerability : CVE-2022-48339

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter file...