PT-2025-18390 · Elastic · Apm Server

Name of the Vulnerable Software and Affected Versions: Elasticsearch APM Server affected versions not specified Description: The issue concerns the potential disclosure of sensitive information in APM Server error logs. This could happen when a bulk index request partially fails, causing parts of...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from an array index out-of-bounds, which could lead to out-of-bounds memory accesses...

Panic in mp3-metadata due to the lack of bounds checking

The getid3 methods used by mp3metadata::readfromslice does not perform adequate bounds checking when recreating the tag due to the use of desynchronization. Fixed in Fix index error, released as part of 0.4.0...

CVE-2025-32971 XWiki Solr script service doesn't take dropped programming right into account

XWiki is a generic wiki platform. In versions starting from 4.5.1 to before 15.10.13, from 16.0.0-rc-1 to before 16.4.4, and from 16.5.0-rc-1 to before 16.8.0-rc-1, the Solr script service doesn't take dropped programming rights into account. The Solr script service that is accessible in XWiki's...

Malicious code in tronlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7b299597be11bab32fd63419a38161e9f3d21a6ab3ee73d1f8cb6b00e397625f Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronapipy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f708be2fc70e3c2c9dc79ee1706944cb73f9604b496c4171a5971f5c6e0091fe Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronjoi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 342de1bcc165de314cdb7ae0e0c63021edebd55ed3601024f66a3ffeb9ab807b Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in wallettron (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 daa2901c8248d9a4e63be69c1595134618d563065c67a466b006d53bd92d5ce5 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in trxone (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8d51e889f28c3581e172022d2ef02199c6eb1ed510b6f339e032278e0f163410 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronlix (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 007bba18e8334f8678c8256d3d77e35146758c5b14ae9861c883b6ef7fbee6ff Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronlid (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 387ea56c726485890b55cce5a96c6381e248be3c8eba22c22ead08e4b30db3b1 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-4248 Malicious code in trxone (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8d51e889f28c3581e172022d2ef02199c6eb1ed510b6f339e032278e0f163410 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-6607 Malicious code in tronjoi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 342de1bcc165de314cdb7ae0e0c63021edebd55ed3601024f66a3ffeb9ab807b Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in tronlibpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3830f2a3daeaf5ef1da928f6700860805f4fb3b0f955ab814f4742b334ca7868 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in trongridlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 810f3d44ffd0654acef07cf5bc57e4c1c8daa207332751a60c14f29f64832560 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-6608 Malicious code in tronlibapi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9691194771bc292f5583fcde670bceb7173ec8ec2e1f4a16f1af1322fce21a80 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-4244 Malicious code in tronix (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 439d817a91f26be5494fd1a2621e8dfb3d178167c802bb0ad7bfcf0fa6b9a0d3 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-4247 Malicious code in tronlix (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 007bba18e8334f8678c8256d3d77e35146758c5b14ae9861c883b6ef7fbee6ff Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-4249 Malicious code in trxtwo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 09ce47da0f3bcc2487cbee6b36384d2712ca257abba3155fcd0f13d9f7acd581 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

RUSTSEC-2025-0027 Panic in mp3-metadata due to the lack of bounds checking

The getid3 methods used by mp3metadata::readfromslice does not perform adequate bounds checking when recreating the tag due to the use of desynchronization. Fixed in Fix index error, released as part of 0.4.0...