GO-2025-3706 Fiber panics when fiber.Ctx.BodyParser parses invalid range index in github.com/gofiber/fiber

Fiber panics when fiber.Ctx.BodyParser parses invalid range index in github.com/gofiber/fiber...

webkitgtk: Processing maliciously crafted web content may lead to memory corruption

A flaw was found in WebKitGTK. Processing malicious web content can cause a buffer overflow due to an improper validation of the index to access an array, resulting in memory corruption...

Malicious code in fernetpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ccbbcfd921dcefb2809ba41756181682f7a04f1a9f701adcf0c37c9889d87a98 If imported, the module starts a multi-stage infostealer, exfiltrating browser data as well as crypto wallets, and also attempts to monitor clipboard looking f...

Malicious code in pyfernet (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5a2f90c0e3c6e46456cd3e319aaaf4a7b53475a554a997a964fdda898e85fcd0 If imported, the module starts a multi-stage infostealer, exfiltrating browser data as well as crypto wallets, and also attempts to monitor clipboard looking f...

CVE-2025-5225

A vulnerability, which was classified as critical, was found in Campcodes Advanced Online Voting System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument voter leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

CampCodes Advanced Online Voting System 注入漏洞

CampCodes Advanced Online Voting System is an advanced online voting system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Advanced Online Voting System, which originates from a SQL injection due to the incorrect manipulation of the parameter voter in the...

Malicious code in tensorflows (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e08c37ae45b3a5d5a85a5555ded262e154d91f563636cb5b149176e1aaf12fa7 Clearly typosquatting packages, but no known malicious parts. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything...

Malicious code in matplotlibe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 082b8eb9ac76b7c5ec057f8c5f0aeff99b84841c33c50fb570874ff4e435375a Clearly typosquatting packages, but no known malicious parts. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything...

MAL-2025-191786 Malicious code in matplotlibe (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 082b8eb9ac76b7c5ec057f8c5f0aeff99b84841c33c50fb570874ff4e435375a Clearly typosquatting packages, but no known malicious parts. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything...

MAL-2025-191891 Malicious code in tensorflows (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e08c37ae45b3a5d5a85a5555ded262e154d91f563636cb5b149176e1aaf12fa7 Clearly typosquatting packages, but no known malicious parts. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything...

Security update for python310-setuptools

This update for python310-setuptools fixes the following issues: CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write bsc1243313. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

Security update for python-setuptools

This update for python-setuptools fixes the following issues: CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write bsc1243313. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2025:01704-1 Security update for python-setuptools

This update for python-setuptools fixes the following issues: - CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write bsc1243313...

DEBIAN-CVE-2025-5168

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as problematic. Affected by this issue is the function MDLImporter::ImportUVCoordinate3DGSMDL345 of the file assimp/code/AssetLib/MDL/MDLLoader.cpp. The manipulation of the argument iIndex leads to out-of-bound...

firefox: thunderbird: Out-of-bounds access when optimizing linear sums

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: An attacker could perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes...

pixelimity 注入漏洞

pixelimity is pixelimity open source a content management system . pixelimity 1.0 version of an injection vulnerability , the vulnerability stems from the file /install/index.php parameter sitedescription in the wrong operation leads to SQL injection...

$PD^3F$: a Pluggable and Dynamic DoS-Defense Framework against Resource Consumption Attacks Targeting Large Language Models

Large Language Models LLMs, due to substantial computational requirements, are vulnerable to resource consumption attacks, which can severely degrade server performance or even cause crashes, as demonstrated by denial-of-service DoS attacks designed for LLMs. However, existing works lack mitigati...

SUSE-SU-2025:01695-1 Security update for python-setuptools

This update for python-setuptools fixes the following issues: - CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write bsc1243313...

Security update for python36-setuptools

This update for python36-setuptools fixes the following issues: CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write bsc1243313. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2025:01693-1 Security update for python36-setuptools

This update for python36-setuptools fixes the following issues: - CVE-2025-47273: path traversal in PackageIndex.download may lead to an arbitrary file write bsc1243313...