22547 matches found
Malicious code in lbank-connector-pythons (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8e2d03134723d75ab2f0b36c6acad54fa5d16b4ba0f04bf2705e188fd19626b9 This is a copy of a legit package with added basic exfiltration in the setup.py --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages,...
MAL-2025-191619 Malicious code in asynhttp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 058c3bab076ccb770a3ecaefbdb301df88bd935a79f154cdeb329c51c4a1eef5 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...
Malicious code in asynhttp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 058c3bab076ccb770a3ecaefbdb301df88bd935a79f154cdeb329c51c4a1eef5 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...
MAL-2025-191645 Malicious code in libtasnl (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0da2df30cd680f292df7b195f51829e4afc94604336223d58b0bfca92714d9fc Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...
Malicious code in libtasnl (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0da2df30cd680f292df7b195f51829e4afc94604336223d58b0bfca92714d9fc Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...
Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in llama_index-0.12.29-py3-none-any.whl CVE-2025-1793
Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in llamaindex-0.12.29-py3-none-any.whl CVE-2025-1793 Vulnerability Details CVEID:CVE-2025-1793 DESCRIPTION: Multiple vector store integrations in run-llama/llamaindex version v0.12.21 have SQL injection...
CVE-2025-60934
Multiple stored cross-site scripting XSS vulnerabilities in the index.php component of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee Notes, title, or description parameters. The patched...
TencentOS Server 2: udisks2 (TSSA-2025:0804)
The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0804 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a system index node linking to a directory hierarchy, which could lead to further file system corruption and...
CVE-2025-53051
Vulnerability in the RDBMS Functional Index component of Oracle Database Server. Supported versions that are affected are 23.4-23.9. Easily exploitable vulnerability allows high privileged attacker having SYSDBA privilege with network access via Oracle Net to compromise RDBMS Functional Index...
CVE-2025-53051
Vulnerability in the RDBMS Functional Index component of Oracle Database Server. Supported versions that are affected are 23.4-23.9. Easily exploitable vulnerability allows high privileged attacker having SYSDBA privilege with network access via Oracle Net to compromise RDBMS Functional Index...
EUVD-2025-35283
Vulnerability in the RDBMS Functional Index component of Oracle Database Server. Supported versions that are affected are 23.4-23.9. Easily exploitable vulnerability allows high privileged attacker having SYSDBA privilege with network access via Oracle Net to compromise RDBMS Functional Index...
JLSEC-2025-186 libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a...
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Using well-crafted inputs to gitindexadd can cause heap corruption that could be leveraged for arbitrary code execution. There...
MAL-2025-191641 Malicious code in installyoura (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ce9e3e9d41cbe7a819ee558b5d69ee8b77d3cbfbf54a5d8167500266dfdca903 Package download and runs widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
EUVD-2025-26370
A vulnerability was determined in Tenda F1202 1.2.0.9/1.2.0.14/1.2.0.20. Impacted is an unknown function of the file /etcro/shadow of the component Administrative Interface. This manipulation with the input Fireitup causes hard-coded credentials. The attack can only be executed locally. A high...
CVE-2025-60934
Multiple stored cross-site scripting XSS vulnerabilities in the index.php component of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee Notes, title, or description parameters. The patched...
CLSA-2025-1761056282 python3-setuptools: Fix of 2 CVEs
CVE-2022-40897: fix Regular Expression Denial of Service ReDoS in packageindex.py - CVE-2024-6345: fix remote code execution in packageindex module...
CLSA-2025-1761051864 python3-setuptools: Fix of 2 CVEs
CVE-2022-40897: fix Regular Expression Denial of Service ReDoS in packageindex.py - CVE-2024-6345: fix remote code execution in packageindex module...
CVE-2025-61456
A Cross-Site Scripting XSS vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoint. Unsanitized input in the /index parameter is directly reflected back into the response HTML, allowing attackers to execute arbitrary JavaScript in the browser of a user who...
CVE-2025-60934
CVE-2025-60934 affects HR Performance Solutions Performance Pro v3.19.17. Multiple stored XSS vulnerabilities exist in the index.php component, enabling an attacker to inject arbitrary web scripts or HTML via crafted payloads placed in Employee Notes, title, or description parameters. The underly...