Malicious code in lolcrazy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9e3fc2ad284d2b4b286da2fc5762b18aade19bc38871779157c54cdb6ae8b4cd Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47785 Malicious code in lolcrazy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9e3fc2ad284d2b4b286da2fc5762b18aade19bc38871779157c54cdb6ae8b4cd Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in importsetup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 07d601622d7b27ef8baa4ec8ef05e06c283dd18ace0fba3a856f3a5adbdce69e Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47774 Malicious code in importsetup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 07d601622d7b27ef8baa4ec8ef05e06c283dd18ace0fba3a856f3a5adbdce69e Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in python-ledgercommon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d88522028116659a8646b0f7c4eb4e6218e498b49ebc36927ca0787720d3e1f9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-47799 Malicious code in python-ledgercommon (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d88522028116659a8646b0f7c4eb4e6218e498b49ebc36927ca0787720d3e1f9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2025-9298

A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...

CVE-2025-9298

A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...

Malicious code in medoen (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f0fcf26f9d33d1a5d868d0637274af9fa3be00737221aaef0cbc596e1fc39f9a Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47786 Malicious code in medoen (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f0fcf26f9d33d1a5d868d0637274af9fa3be00737221aaef0cbc596e1fc39f9a Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in pacakegenow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4e6e546396a62564e76e758bc338b07b8567b32dce9f89bdf5a59d3a670eedc9 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47793 Malicious code in pacakegenow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4e6e546396a62564e76e758bc338b07b8567b32dce9f89bdf5a59d3a670eedc9 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in woowoowo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 68c093297f2648c1f7fbdccd35b7191bf273b78dbcefdae24c26a9739cfad086 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47812 Malicious code in woowoowo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 68c093297f2648c1f7fbdccd35b7191bf273b78dbcefdae24c26a9739cfad086 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in k7eeel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2efb19cb81393cb377946edce80dfdae18968a190f7ab3a35dae3109ff17026c Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47776 Malicious code in k7eeel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2efb19cb81393cb377946edce80dfdae18968a190f7ab3a35dae3109ff17026c Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in k7eela (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ed0626762f4c1981700c0a6a6782dce64b6ebe2a9dc478b5a3d4ad2f186f8645 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

CVE-2025-55420

FoxCMS v1.2.6 is affected by a Reflected XSS in the /index.php endpoint. The issue stems from unsanitized reflection of a crafted script via a GET request, enabling execution of arbitrary JavaScript when a logged-in user submits the malicious input. CVSSv3.1 base score 8.8 (HIGH) with NETWORK att...

PT-2025-34231 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: FoxCMS version 1.2.6 Description: A Reflected Cross Site Scripting XSS vulnerability exists in the /index.php endpoint of the software. When a crafted script is sent via a GET request, it is reflected unsanitized into the HTML response,...

PT-2025-34238 · Sourcecodester · Itsourcecode Advanced School Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Advanced School Management System version 1.0 Description: A cross-site scripting issue exists in SourceCodester Advanced School Management System 1.0. The issue is located in an unknown function within the...