openSUSE: Security Advisory for python39 (SUSE-SU-2023:2957-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for the Linux Kernel (SUSE-SU-2023:3680-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for python39 (SUSE-SU-2023:2641-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-2007

CVE-2024-2007 concerns OpenBMB XAgent 1.0.0, specifically a vulnerability in the Privileged Mode component that enables sandbox issues. The root cause is described as a sandboxing failure allowing local exploitation, with the attack vector labeled as LOCAL and user interaction not required. The e...

CVE-2024-2007 OpenBMB XAgent Privileged Mode sandbox

A vulnerability was found in OpenBMB XAgent 1.0.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component Privileged Mode. The manipulation leads to sandbox issue. The attack needs to be approached locally. The exploit has been disclosed to t...

CentOS 9 : python3.9-3.9.16-2.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the python3.9-3.9.16-2.el9 build changelog. - Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote...

CVE-2007-6013

creationtimestamp| type| source ---|---|--- 2024-02-09 08:16:48+00:00| seen| https://t.me/ctinow/181852...

CVE-2007-0681

creationtimestamp| type| source ---|---|--- 2024-02-09 08:16:47+00:00| seen| https://t.me/ctinow/181851...

CentOS 8 : python3.11 (CESA-2023:7024)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:7024 advisory. - Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers t...

CentOS 8 : python3 (CESA-2023:7151)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:7151 advisory. - Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwri...

PHPMailer Local file inclusion

Impact Arbitrary local file inclusion via the $lang property, remotely exploitable if host application passes unfiltered user data into that property. The 3 CVEs listed are applications that used PHPMailer that were vulnerable to this problem. Patches It's not known exactly when this was fixed in...

GHSA-6H78-85V2-MMCH PHPMailer Shell command injection

PHPMailer before 1.7.4, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php. Impact Shell command injection, remotely exploitable if host application does not filter user data...

PHPMailer Shell command injection

PHPMailer before 1.7.4, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php. Impact Shell command injection, remotely exploitable if host application does not filter user data...

CVE-2007-1285

creationtimestamp| type| source ---|---|--- 2024-02-02 17:16:56+00:00| seen| https://t.me/ctinow/178160...

Moderate: Red Hat Security Advisory: python3 security update

An update for python3 is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

RHEL 8 : python-pip (RHSA-2024:0374)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0374 advisory. pip is a package management system used to install and manage software packages written in Python. Many packages can be found in the Python Package...

MAL-2024-357 Malicious code in wlwz-2312-2007 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b061f393282c6760e5ec89c8ee1f7b0bff5e6bbc14ebc698ffdc8317ee7aecb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in wlwz-2312-2007 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b061f393282c6760e5ec89c8ee1f7b0bff5e6bbc14ebc698ffdc8317ee7aecb4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Moderate: Red Hat Security Advisory: python-pip security update

An update for python-pip is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

CVE-2023-2007

creationtimestamp| type| source ---|---|--- 2024-01-19 18:32:05+00:00| seen| https://t.me/ctinow/170328 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...