MAL-2025-47745 Malicious code in anrok (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b5854a1605e38893db27e5a757ab744d3d53f0a203b59a70faf53545636d7fca Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in anrk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d31b93354ffab349a38deda7660563fa2c08f9b7b1a0c207308962aef1632f7f Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47744 Malicious code in anrk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d31b93354ffab349a38deda7660563fa2c08f9b7b1a0c207308962aef1632f7f Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-41435 Malicious code in initialtestingdonotpull1235 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 638020a87c6e1aaf4b8542a5b20723a6ed900b986bfd407c8bf55aad3016933f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2025-9306

A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/notice/addNotice. The manipulation of the argument noticeSubject results in cross site scripting. It is possible to launch the attack remotely...

CVE-2025-9298

A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...

MAL-2025-47762 Malicious code in electrum-bch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e4c3bb0f735a352c6f4d18865f3a145912c31f6b9da22c48e731e7fe750b1dd The modification of https://github.com/spesmilo/electrum not clear which version or fork that during usage will exfiltrate files from the current directory,...

Malicious code in electrum-bch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e4c3bb0f735a352c6f4d18865f3a145912c31f6b9da22c48e731e7fe750b1dd The modification of https://github.com/spesmilo/electrum not clear which version or fork that during usage will exfiltrate files from the current directory,...

Malicious code in nukebount (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 08b5c0de8042d5eedece216ff03327fbb71f32994257141f7d47f01aa8aa5491 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47789 Malicious code in nukebount (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 08b5c0de8042d5eedece216ff03327fbb71f32994257141f7d47f01aa8aa5491 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47791 Malicious code in nukeport (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 93c339ed9593cfb15c4c9907ec2e2d10c4e7f7acc0fb1acca50cb81d157b0551 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in nukeport (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 93c339ed9593cfb15c4c9907ec2e2d10c4e7f7acc0fb1acca50cb81d157b0551 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

CVE-2024-57154

Incorrect access control in dts-shop v0.0.1-SNAPSHOT allows attackers to bypass authentication via sending a crafted payload to /admin/auth/index...

CVE-2025-9147

A vulnerability has been found in jasonclark getsemantic up to 040c96eb8cf9947488bd01b8de99b607b0519f7d. The impacted element is an unknown function of the file /index.php. The manipulation of the argument view leads to cross site scripting. Remote exploitation of the attack is possible. The...

CVE-2025-9306

A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/notice/addNotice. The manipulation of the argument noticeSubject results in cross site scripting. It is possible to launch the attack remotely...

CVE-2025-55420

A Reflected Cross Site Scripting XSS vulnerability was found in /index.php in FoxCMS v1.2.6. When a crafted script is sent via a GET request, it is reflected unsanitized into the HTML response. This permits execution of arbitrary JavaScript code when a logged-in user submits the malicious input...

MAL-2025-47771 Malicious code in hacktool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ae918afa1c3b130c4df2aa0a968a44eee15feebeb1c1df562a56feb37db96423 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in hacktool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ae918afa1c3b130c4df2aa0a968a44eee15feebeb1c1df562a56feb37db96423 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in vcdiff-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d15d16ed1fc3a2984f207f6b4cf5fbea00fc66ecbf61a57faee650730aaf5c9d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-47811 Malicious code in vcdiff-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d15d16ed1fc3a2984f207f6b4cf5fbea00fc66ecbf61a57faee650730aaf5c9d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...