Malware in alchemy-web3-webpack-example

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-38 Malicious code in alchemy-web3-webpack-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0baf7db6925882a96eddaa00b4877f9147183d9b00a85fd69b02e5fe625f7ff7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in alchemy-pg-search (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6545 Malicious code in alchemy-pg-search (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

ape-addressbook (>=0.4.0a1, <=0.5.0a1), ape-alchemy (>=0.1.0b1, <=0.5.4) +54 more potentially affected by unknown CVE via eth-abi (3.0.1)

eth-abi PYPI version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on eth-abi and may be impacted: - ape-addressbook =0.4.0a1, =0.1.0b1, =0.1.22, =0.4.0, =0.4.0a0, =0.1.0a0, =0.4.0a1, =0.1.0a2, =0.4.0, =0.4.0, =0.4.0, =0.4.0a1, =0.4.0, =0.5.5 and...

Unbreakable Enterprise kernel-container security update

5.4.17-2136.325.5.el8 - perf symbols: Symbol lookup with kcore can fail if multiple segments match stext Krister Johansen Orabug: 35905508 - char: misc: Increase the maximum number of dynamic misc devices to 1048448 D Scott Phillips Orabug: 35905508 - perf/arm-cmn: Fix invalid pointer when access...

alchemy-stitchcraft.co.uk Cross Site Scripting vulnerability OBB-3475325

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

agentopia (>=0.1.0, <=0.1.5), alaya-py (>=0.15.0.0, <=0.15.0.1) +218 more potentially affected by CVE-2022-37454 via pysha3 (>=1.0.0b1, <=1.0.2)

pysha3 PYPI version =1.0.0b1, =0.1.0, =0.15.0.0, =0.4.0a1, =0.1.0b1, =0.1.22, =0.4.0, =0.4.0a0, =0.1.0a0, =0.4.0a1, =0.1.0a2, =0.4.0, =0.4.0, =0.4.0, =0.5.2 - ape-frame 0.5.0a0 and more Source cves: CVE-2022-37454 Source advisory: OSV:GHSA-6W4M-2XHG-2658...

SUSE CVE-2013-4511

Multiple integer overflows in Alchemy LCD frame-buffer drivers in the Linux kernel before 3.12 allow local users to create a read-write memory mapping for the entirety of kernel memory, and consequently gain privileges, via crafted mmap operations, related to the 1 au1100fbfbmmap function in...

GHSA-CXVP-3FRM-3876 Apache Superset's SQL Alchemy connector vulnerable to SQL Injection

A vulnerability in the SQL Alchemy connector of Apache Superset allows an authenticated user with read access to a specific database to add subqueries to the WHERE and HAVING fields referencing tables on the same database that the user should not have access to, despite the user having the featur...

Apache Superset's SQL Alchemy connector vulnerable to SQL Injection

A vulnerability in the SQL Alchemy connector of Apache Superset allows an authenticated user with read access to a specific database to add subqueries to the WHERE and HAVING fields referencing tables on the same database that the user should not have access to, despite the user having the featur...

Design/Logic Flaw

A vulnerability in the SQL Alchemy connector of Apache Superset allows an authenticated user with read access to a specific database to add subqueries to the WHERE and HAVING fields referencing tables on the same database that the user should not have access to, despite the user having the featur...

CVE-2022-41703

The CVE-2022-41703 issue is in Apache Superset’s SQL Alchemy connector. An authenticated user with read access to a database can add subqueries in the WHERE and HAVING clauses that reference tables the user should not access, even when the ALLOW_ADHOC_SUBQUERY feature flag is disabled. Affected v...

CVE-2022-41703 Apache Superset: SQL injection vulnerability in adhoc clauses

A vulnerability in the SQL Alchemy connector of Apache Superset allows an authenticated user with read access to a specific database to add subqueries to the WHERE and HAVING fields referencing tables on the same database that the user should not have access to, despite the user having the featur...

CVE-2022-41703 Apache Superset: SQL injection vulnerability in adhoc clauses

A vulnerability in the SQL Alchemy connector of Apache Superset allows an authenticated user with read access to a specific database to add subqueries to the WHERE and HAVING fields referencing tables on the same database that the user should not have access to, despite the user having the featur...

CVE-2022-41703

A vulnerability in the SQL Alchemy connector of Apache Superset allows an authenticated user with read access to a specific database to add subqueries to the WHERE and HAVING fields referencing tables on the same database that the user should not have access to, despite the user having the featur...

CVE-2022-41703: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability in the SQL Alchemy connector of Apache Superset allows an authenticated user with read access to a specific database to add subqueries to the WHERE and HAVING fields referencing tables on the same database that the user should not have access to, despite the user having the featur...

0x-order-utils (>=1.0.2, <=1.1.1), 0x-web3 (>=4.7.1, <=5.0.0a5) +134 more potentially affected by CVE-2022-1930 via eth-account (>=0.1.0a2, <=0.5.8)

eth-account PYPI version =0.1.0a2, =1.0.2, =4.7.1, =0.1.13, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.0, =0.0.0, =0.0.0, =0.0.5, =0.1.0 and more Source cves: CVE-2022-1930 Source advisory: MEND:CVE-2022-1930...

Alchemy CMS 6.0.0 Arbitrary File Upload

Exploit Title: AlchemyCMS 2.x to 6.0.0 - Unrestricted File Upload authenticated Date: 01/10/2021 Exploit Author: Abdulrahman https://twitter.com/infosec90 Vendor Homepage: https://alchemy-cms.com Software Link: https://github.com/AlchemyCMS/alchemycms Version: from 2.0 to 6.0.0 Tested on: Linux...

Alchemy CMS 6.0.0 Arbitrary File Upload Vulnerability

Exploit Title: AlchemyCMS 2.x to 6.0.0 - Unrestricted File Upload authenticated Exploit Author: Abdulrahman https://twitter.com/infosec90 Vendor Homepage: https://alchemy-cms.com Software Link: https://github.com/AlchemyCMS/alchemycms Version: from 2.0 to 6.0.0 Tested on: Linux ruby 2.6.8p205 rai...