Lucene search
+L

413 matches found

Github Security Blog
Github Security Blog
added 2025/12/29 10:44 p.m.17 views

Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.param_eval

Summary Picklescan uses numpy.f2py.crackfortran.parameval, which is a function in numpy to execute remote pickle files. Details The attack payload executes in the following steps: - First, the attacker crafts the payload by calling the numpy.f2py.crackfortran.parameval function via reduce method....

7.9AI score
SaveExploits0References5Affected Software1
Github Security Blog
Github Security Blog
added 2025/12/29 8:03 p.m.16 views

Picklescan is vulnerable to RCE through missing detection when calling built-in python operator.methodcaller

Summary Picklescan uses operator.methodcaller, which is a built-in python library function to execute remote pickle files. Details The attack payload executes in the following steps: - First, the attacker crafts the payload by calling the operator.methodcaller function in method reduce. - Then,...

7.9AI score
SaveExploits0References4Affected Software1
OSV
OSV
added 2025/12/29 8:03 p.m.21 views

GHSA-X843-G5MX-G377 Picklescan is vulnerable to RCE through missing detection when calling built-in python operator.methodcaller

Summary Picklescan uses operator.methodcaller, which is a built-in python library function to execute remote pickle files. Details The attack payload executes in the following steps: - First, the attacker crafts the payload by calling the operator.methodcaller function in method reduce. - Then,...

8.7CVSS7.7AI score0.00637EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/12/18 8:33 p.m.34 views

CVE-2025-62002 BullWall Ransomware Containment file count detection bypass

BullWall Ransomware Containment considers the number of files modified to trigger detection. An authenticated attacker could encrypt a single possibly large file without triggering detection if thresholds are configured to require multiple file changes. The number of files to trigger detection ca...

5.3CVSS0.00292EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/12/18 8:32 p.m.35 views

CVE-2025-62001 BullWall Ransomware Containment hard-coded folder exclusions

BullWall Ransomware Containment supports configurable file and directory exclusions such as '$RECYCLE.BIN' to balance monitoring scope and performance. Certain exclusion patterns could allow an authenticated attacker to rename directories in a way that avoids monitoring. Fixed in 4.6.1.14 and...

8.8CVSS0.00359EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.9 views

BullWall Ransomware Containment 安全漏洞

BullWall Ransomware Containment is a ransomware protection software from BullWall Denmark. A security vulnerability exists in BullWall Ransomware Containment versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4, which stems from an incomplete file check and could lead to bypassing detection...

7.1CVSS6.6AI score0.00212EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2025/12/18 12:00 a.m.8 views

BullWall Ransomware Containment 安全漏洞

BullWall Ransomware Containment is a ransomware protection software from BullWall Denmark. A security vulnerability exists in BullWall Ransomware Containment versions 4.6.0.0, 4.6.0.6, 4.6.0.7, and 4.6.1.4, which stems from an unmonitored exclusion file path that could lead to bypassing detection...

8.8CVSS6.6AI score0.00359EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/12/17 8:07 a.m.11 views

CVE-2023-29144

Malwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios. This allows a bypass of detection...

3.3CVSS6.9AI score0.00207EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/12 6:30 p.m.12 views

EUVD-2023-32746

Malwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios. This allows a bypass of detection...

3.3CVSS6.3AI score0.00207EPSS
SaveExploits0References3
NVD
NVD
added 2025/12/12 5:15 p.m.16 views

CVE-2023-29144

Malwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios. This allows a bypass of detection...

3.3CVSS0.00207EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/12/12 12:00 a.m.6 views

CVE-2023-29144

Malwarebytes 1.0.14 for Linux doesn't properly compute signatures in some scenarios. This allows a bypass of detection...

6.5AI score0.00207EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/12/12 12:00 a.m.17 views

PT-2025-50956

Name of the Vulnerable Software and Affected Versions Malwarebytes version 1.0.14 Description The software does not correctly calculate signatures in certain situations, leading to a potential bypass of malware detection. Recommendations Update to a newer version that contains a fix for this...

3.3CVSS6.6AI score0.00207EPSS
SaveExploits0References6
CVE
CVE
added 2025/12/12 12:00 a.m.23 views

CVE-2023-29144

Affected software: Malwarebytes 1.0.14 for Linux. Vulnerability: does not properly compute signatures in some scenarios, allowing a bypass of malware detection. Impact: local bypass of detection is implied by the description. Root cause: incorrect calculation of signatures. Exploitation status: n...

3.3CVSS6.5AI score0.00207EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2025/12/12 12:00 a.m.11 views

Malwarebytes 安全漏洞

Malwarebytes is an application from the American company Malwarebytes that provides anti-malware capabilities to devices. The software is designed to defend against viruses, spyware, Trojans, worms, dial-up programs, and other malware. A security vulnerability exists in Malwarebytes version 1.0.1...

3.3CVSS6.6AI score0.00207EPSS
SaveExploits0References2
CVE
CVE
added 2025/12/05 3:19 a.m.32 views

CVE-2025-27389

Technical details such as affected products, versions, root cause, or exploitation steps are not publicly provided in the supplied documents. Monitor for updates from vendors and CVE feeds.

5.1CVSS6.2AI score0.00131EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/05 3:19 a.m.11 views

CVE-2025-27389 Application Installation Source Verification Flaw May Lead to Risk Detection Bypass

A flaw exists in the verification of application installation sources within ColorOS. Under specific conditions, this issue may cause the risk detection mechanism to fail, which could allow malicious applications to be installed without proper warning...

5.1CVSS6.2AI score0.00131EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/10/08 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2025-59147

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community. Versions 7.0.11 and below, ...

7.5CVSS5.8AI score0.00347EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/10/08 12:00 a.m.5 views

Suricata < 7.0.12 / 8.0.0 < 8.0.1 Detection Bypass

The version of OISF Suricata installed on the remote host is prior to 7.0.12 and 8.0.x prior to 8.0.1. It is, therefore, affected by multiple vulnerabilities: - Suricata is a network IDS, IPS and NSM engine developed by the OISF Open Information Security Foundation and the Suricata community...

7.5CVSS6AI score0.00347EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2006-6392

Malware in sbrugna...

10CVSS6.4AI score0.03671EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2005-3227

Malware in sbrugna...

5.1CVSS6.4AI score0.01991EPSS
SaveExploits0References3
Rows per page
Query Builder