22721 matches found
Malicious code in someeebbb (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0fd59432f228380b77cbfb70e5a776f13b909d7be4b57ce72e270f41ac035ee0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-41764 Malicious code in someeebbb (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0fd59432f228380b77cbfb70e5a776f13b909d7be4b57ce72e270f41ac035ee0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
RLSA-2025:8246 Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: wifi: rtw89: Fix array index mistake in rtw89stainfogetiter CVE-2024-43842 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other relat...
Malicious code in triple-equal (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 10911ac4eed73695e2fe15b22983d481742de5688de5b3329d330daa2f88bba9 When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...
MAL-2025-41786 Malicious code in triple-equal (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 10911ac4eed73695e2fe15b22983d481742de5688de5b3329d330daa2f88bba9 When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...
The vulnerability in the module arch/loongarch/kvm/intc/eiointc.c of Linux operating systems allows a hacker to cause a service failure.
The vulnerability in the arch/loongarch/kvm/intc/eiointc.c module of Linux operating systems is related to incorrect array index checking. Exploiting this vulnerability can allow an attacker to cause a service failure...
Hierarchical Graph Neural Network for Compressed Speech Steganalysis
Steganalysis methods based on deep learning DL often struggle with computational complexity and challenges in generalizing across different datasets. Incorporating a graph neural network GNN into steganalysis schemes enables the leveraging of relational data for improved detection accuracy and...
SUSE CVE-2025-38367
In the Linux kernel, the following vulnerability has been resolved: LoongArch: KVM: Avoid overflow with array index The variable index is modified and reused as array index when modify register EIOINTCENABLE. There will be array index overflow problem...
Malicious code in testpackageroietest3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 88b61508de8bb1a4224db6f1b2c7f8784f678f59e6ecacfac77c0a7d3f0409df Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in testpackageroietest2 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 540d9028178695a791b307758df0ac5dca1f6c77f19e12579e4b0745580f358d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-41775 Malicious code in testpackageroietest2 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 540d9028178695a791b307758df0ac5dca1f6c77f19e12579e4b0745580f358d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in udn_extras (npm)
The package is a malware because it contains a postinstall script that executes index.js. The index.js script gathers sensitive information such as hostname, platform, username, IP address, and environment variables and sends it to an external server webhook.site via an HTTPS POST request. This...
Malicious code in greater-than (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9287f16baf24f1b5d14e3cdae0ae58d583bcacfa0a19d78c41fc32b3fdce547c When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...
MAL-2025-41681 Malicious code in greater-than (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9287f16baf24f1b5d14e3cdae0ae58d583bcacfa0a19d78c41fc32b3fdce547c When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...
Malicious code in requires-python (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 fa1ee2e2c3ead90338250a60177535b23b5f30016e1d06a5b944092cbc3305e7 When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...
MAL-2025-41747 Malicious code in requires-python (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 fa1ee2e2c3ead90338250a60177535b23b5f30016e1d06a5b944092cbc3305e7 When imported, the package attempts to exfiltrate environment variables and basic user info --- Category: MALICIOUS - The campaign has clearly malicious intent...
CVE-2025-8203
A vulnerability classified as critical has been found in Jingmen Zeyou Large File Upload Control up to 6.3. Affected is an unknown function of the file /index.jsp. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been...
Malicious code in prof-qux (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5b87af8d8f13bd43c1cf3490ea551b8d60fe05a482875597ef2fe5d2c200ca19 Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...
MAL-2025-191822 Malicious code in prof-qx (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 eb25a7704dc642f82be2ae6a92dcd60cc3235144351fbc18cd11ca96d970c7e3 Package silently exfiltrates user's credentials ahead of starting the promised functionality. First batch used simple code, the newer attempt to hide...
