Lucene search
+L

12 matches found

Kitploit
Kitploit
•added 2026/10/04 5:32 a.m.•12 views

pollyscan

Pollyscan-CVE-2024-38526-Vulnerability Scanner It is a lightweight security tool designed to detect CVE-2024-38526, the Polyfill.io Supply Chain Attack. It scans web dependencies for malicious injections & automated detection. Installation git clone https://github.com/padayali-JD/pollyscan.git cd...

7.2CVSS7.6AI score0.03832EPSS
SaveExploits0References1
PyPA
PyPA
•added 2026/07/07 2:34 p.m.•19 views

pdoc embeds link to malicious CDN if math mode is enabled

ImpactDocumentation generated with pdoc --math linked to JavaScript files from polyfill.io.The polyfill.io CDN has been sold and now serves malicious code.Users who produce documentation with math mode should update immediately. All other users are unaffected. PatchesThis issue has been fixed in...

7.2CVSS5.9AI score0.03832EPSS
SaveExploits0References9Affected Software1
Tenable Nessus
Tenable Nessus
•added 2025/06/25 12:00 a.m.•5 views

SUSE SLES15 / openSUSE 15 Security Update : ghc-pandoc (SUSE-SU-2025:02037-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2025:02037-1 advisory. - CVE-2024-38526: Fixed Polyfill Supply Chain Attack bsc1227690. Tenable has extracted the preceding description block directly from the...

7.2CVSS8.3AI score0.03832EPSS
SaveExploits0References4
OpenVAS
OpenVAS
•added 2025/06/23 12:00 a.m.•16 views

openSUSE Security Advisory (SUSE-SU-2025:02037-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.2CVSS9.5AI score0.03832EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
•added 2025/06/20 9:40 a.m.•5 views

Security update for ghc-pandoc

This update for ghc-pandoc fixes the following issues: CVE-2024-38526: Fixed Polyfill Supply Chain Attack bsc1227690. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can run the command liste...

5.4CVSS9.7AI score0.03832EPSS
SaveExploits0References4
OSV
OSV
•added 2025/06/20 9:40 a.m.•6 views

SUSE-SU-2025:02037-1 Security update for ghc-pandoc

This update for ghc-pandoc fixes the following issues: - CVE-2024-38526: Fixed Polyfill Supply Chain Attack bsc1227690...

7.2CVSS5.8AI score0.03832EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2024/12/12 12:00 a.m.•13 views

Pdoc Python Library <= 14.5.1 (CVE-2024-38526)

pdoc provides API Documentation for Python Projects. Documentation generated with pdoc --math linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. This issue has been fixed in pdoc 14.5.1. Note that Nessus has not tested for this issue but...

7.2CVSS8.1AI score0.03832EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2024/07/13 2:38 a.m.•15 views

SUSE CVE-2024-38526

pdoc provides API Documentation for Python Projects. Documentation generated with pdoc --math linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. This issue has been fixed in pdoc 14.5.1...

5.4CVSS6.9AI score0.03832EPSS
SaveExploits0References4
NVD
NVD
•added 2024/06/26 12:15 a.m.•73 views

CVE-2024-38526

pdoc provides API Documentation for Python Projects. Documentation generated with pdoc --math linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. This issue has been fixed in pdoc 14.5.1...

7.2CVSS0.03832EPSS
SaveExploits0References4
CVE
CVE
•added 2024/06/25 11:53 p.m.•416 views

CVE-2024-38526

The pdoc Python library for API documentation is affected by a supply chain attack where documentation generated with pdoc --math linked to malicious JavaScript files from the compromised polyfill.io CDN. This issue is fixed in pdoc version 14.5.1 . Several security tools, including pollyscan and...

7.2CVSS6.8AI score0.03832EPSS
SaveIn wildExploits0References4
Cvelist
Cvelist
•added 2024/06/25 11:53 p.m.•222 views

CVE-2024-38526 pdoc embeds link to malicious CDN if math mode is enabled

pdoc provides API Documentation for Python Projects. Documentation generated with pdoc --math linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. This issue has been fixed in pdoc 14.5.1...

7.2CVSS0.03832EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2024/06/25 11:53 p.m.•23 views

CVE-2024-38526 pdoc embeds link to malicious CDN if math mode is enabled

pdoc provides API Documentation for Python Projects. Documentation generated with pdoc --math linked to JavaScript files from polyfill.io. The polyfill.io CDN has been sold and now serves malicious code. This issue has been fixed in pdoc 14.5.1...

7.2CVSS6.8AI score0.03832EPSS
SaveExploits0References4
Rows per page
Query Builder