22539 matches found
Malicious code in fireeye-main (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-192893 Malicious code in fireeye-main (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fire-eye-bcs (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in blastchamber-python-pypi (PyPI)
--- -= Per source details. Do not edit below this line.=-...
SUSE CVE-2025-14957
A vulnerability was identified in WebAssembly Binaryen up to 125. This affects the function IRBuilder::makeLocalGet/IRBuilder::makeLocalSet/IRBuilder::makeLocalTee of the file src/wasm/wasm-ir-builder.cpp of the component IRBuilder. Such manipulation of the argument Index leads to null pointer...
EUVD-2023-60245
SOUND4 IMPACT/FIRST/PULSE/Eco version 2.x contains an SQL injection vulnerability in the 'index.php' authentication mechanism that allows attackers to manipulate login credentials. Attackers can inject malicious SQL code through the 'password' POST parameter to bypass authentication and potential...
ROS-20251223-7308
Vulnerability in python3.10 related to incorrect validation of a specified index, position or offset in input data. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20251223-7310
Vulnerability in python3.13 related to incorrect validation of a specified index, position or offset in input data. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20251223-7309
Vulnerability in python3.11 related to incorrect validation of a specified index, position or offset in input data. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
ROS-20251223-7307
Vulnerability in python3 related to incorrect validation of a specified index, position or offset in input data. Exploitation of the vulnerability could allow an attacker to cause a denial of service...
CVE-2023-53963
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands through the 'password' parameter. Attackers can exploit the login.php and index.php scripts by injecting shell commands via the...
CVE-2023-53960
SOUND4 IMPACT/FIRST/PULSE/Eco version 2.x contains an SQL injection vulnerability in the 'index.php' authentication mechanism that allows attackers to manipulate login credentials. Attackers can inject malicious SQL code through the 'password' POST parameter to bypass authentication and potential...
CVE-2023-53963
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands through the 'password' parameter. Attackers can exploit the login.php and index.php scripts by injecting shell commands via the...
CVE-2023-53963 SOUND4 IMPACT/FIRST/PULSE/Eco v2.x Unauthenticated Remote Command Injection
SOUND4 IMPACT/FIRST/PULSE/Eco v2.x contains an unauthenticated OS command injection vulnerability that allows remote attackers to execute arbitrary shell commands through the 'password' parameter. Attackers can exploit the login.php and index.php scripts by injecting shell commands via the...
CVE-2023-53960
The CVE-2023-53960 entry relates to SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and describes an SQL injection in the index.php authentication flow that lets an attacker inject SQL via the password POST parameter to bypass authentication and potentially gain unauthorized access. The root cause is ...
CVE-2023-53975 Atom CMS 2.0 Unauthenticated SQL Injection via Admin Index Page
Atom CMS 2.0 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries through unvalidated parameters. Attackers can inject malicious SQL code in the 'id' parameter of the admin index page to execute time-based blind SQL injection attacks...
CVE-2023-53975 Atom CMS 2.0 Unauthenticated SQL Injection via Admin Index Page
Atom CMS 2.0 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries through unvalidated parameters. Attackers can inject malicious SQL code in the 'id' parameter of the admin index page to execute time-based blind SQL injection attacks...
CVE-2023-53975
CVE-2023-53975 affects Atom CMS 2.0 and describes an unauthenticated SQL injection via the id parameter on the admin index page, enabling time-based blind queries. The vulnerability stems from unvalidated input used in database queries, with potential impact on integrity and confidentiality as in...