1280014 matches found
MAL-2026-18104 Malicious code in semvver (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector bbc16b0ced0bad1a33b912dfdb29cbaef211f30974d942991257d4e6b60a8ece setup.py performs an install-time fetch-and-execute: it calls urllib.request.urlretrieve against https://c2-worker.crawlnet-claim.workers.dev/dl/pyup...
CVE-2026-23918-poc
CVE-2026-23918 — Apache modhttp2 Double Free Affected: Apache HTTP Server 2.4.66 with modhttp2 + Event MPM Fixed in: Apache 2.4.67 modh2 v2.0.37 CVSS 3.1: 8.8 HIGH — Unauthenticated Remote Code Execution possible CWE: CWE-415 Double Free What's the vulnerability modhttp2 in Apache 2.4.66 has a...
MAL-2026-18102 Malicious code in semveer (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d86237b957fd063a0e1fcf250a510b2fb9566ab48652e56fe787d2e1a02e351a The sdist for 'semveer' ships an inert module semveer/init.py contains only a version stub and places all runtime behavior inside setup.py's install...
Malicious code in semmver (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de323d5976a26f2d9540680d1706a53bcb3ca743409821e83f7a2f1b60e8594 The package is a typosquat-style empty stub semmver/init.py contains only version = '1.0.0' whose only functional code is in setup.py. At pip install...
MAL-2026-18101 Malicious code in semmver (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8de323d5976a26f2d9540680d1706a53bcb3ca743409821e83f7a2f1b60e8594 The package is a typosquat-style empty stub semmver/init.py contains only version = '1.0.0' whose only functional code is in setup.py. At pip install...
Malicious code in semverr (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110e0a64dd80654ca98caa5e291499d158a39eb66c1d35efe896a42095c85118 semverr is a near-empty package a one-line version whose name resembles the popular semver library. Its setup.py runs at install time invoked by pip...
MAL-2026-18103 Malicious code in semverr (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 110e0a64dd80654ca98caa5e291499d158a39eb66c1d35efe896a42095c85118 semverr is a near-empty package a one-line version whose name resembles the popular semver library. Its setup.py runs at install time invoked by pip...
CVE-2026-106173
CVE-2026-106173: Fortinet FortiSIEM gRPC Path Traversal File Write RCE This repository contains a proof of concept for CVE-2026-106173, an unauthenticated remote code execution vulnerability in Fortinet FortiSIEM. Vulnerability Details The FortiSIEM gRPC QueryResultReq handler processes untrusted...
CVE-2025-57819-exploit
CVE-2025-57819 — FreePBX Pre-Auth SQLi to RCE An all-in-one exploit for CVE-2025-57819 , an unauthenticated SQL injection in FreePBX's endpoint module that leads to remote code execution via cron job injection. CVSS : 9.8 Critical — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CISA KEV : Added...
EUVD-2026-105255
Acrobat for Edge is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
CVE-2026-100134
Acrobat for Edge is affected by an out-of-bounds write vulnerability (CWE-787). This flaw could allow an attacker to achieve arbitrary code execution in the context of the current user. Successful exploitation requires user interaction , specifically requiring a victim to open a malicious file. N...
CVE-2026-75747
This CVE ID is rejected and does not represent an active vulnerability entry, as it was issued in error.
CVE-2026-21356
This CVE ID is rejected and does not represent an active vulnerability entry.
CVE-2026-75751
This CVE ID is rejected and does not represent an active vulnerability entry.