Malicious code in quickcolors (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 05deb6781dc1a1781e9a811200127704052a70029ade2a3e97f2c010d9453fc2 Importing the module starts a code that exfiltrates data from local Telegram application --- Category: MALICIOUS - The campaign has clearly malicious intent,...

Malicious code in quicolor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4b11a81f135d7d2ac414b7144af73523d15db7b0ce1a2757ba6ba95f50bf0be8 Importing the module starts a code that exfiltrates data from local Telegram application --- Category: MALICIOUS - The campaign has clearly malicious intent,...

Malicious code in coloryi (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7fda5ee85e248eb4ab426d18592fa9703ff19567ed041d3d75740a231464152d Importing the module starts a code that exfiltrates data from local Telegram application --- Category: MALICIOUS - The campaign has clearly malicious intent,...

The vulnerability of the setWebWlanIdx() function in TOTOLINK EX200 router microprogramming software allows a intruder to execute arbitrary commands.

The vulnerability of the setWebWlanIdx function in TOTOLINK EX200 router microprogramming software is related to the incorrect processing of the webWlanIdx parameter. Exploiting this vulnerability can allow an attacker to execute arbitrary commands remotely...

The vulnerability of the formQuickIndex() function in the Tenda F1202 router’s microprogramming software allows a hacker to compromise the accessibility of the protected information.

The vulnerability of the formQuickIndex function in the Tenda F1202 router’s microprogramming software is related to the operation of writing data outside the buffer in memory when processing the PPPOEPassword parameter. Exploiting this vulnerability could allow a malicious actor to compromise th...

Malicious code in bbllaacckkwwoollff6ad8f753 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6d4b59c0779917e138aea3b1a424593ca84b58fa16a0cd75ba8a4c7523f92c87 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

Malicious code in bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4da60ab5fd2248194d9c485e99360f30cd77d89de065b6f30259328cfcadd2f2 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

MAL-2025-3446 Malicious code in f2d5cfdc642c3d4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7996c4b5f5093de9bc2646228bce15683af10ede7957a934c5afa67346f1149d During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

MAL-2025-3433 Malicious code in bbllaacckkwwoollff6ad8f752 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e1532a9577dc6edfd513dfbb1f189bc4cd08297e76c1f93bb2bf25ceaa210618 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

Malicious code in bbllaacckkwwoollff6ad8f751 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e88e848094db2d7414ceaf71a5a332701df9a17b145c137f0f5df76503847f90 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

Malicious code in f2d5cfdc642c3d5 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ea846c355b07f5a44c9e9add5eccd50fcf359359f6fdc49de3f7b696697b87c2 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

MAL-2025-3434 Malicious code in bbllaacckkwwoollff6ad8f753 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6d4b59c0779917e138aea3b1a424593ca84b58fa16a0cd75ba8a4c7523f92c87 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

MAL-2025-3432 Malicious code in bbllaacckkwwoollff6ad8f751 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 e88e848094db2d7414ceaf71a5a332701df9a17b145c137f0f5df76503847f90 During installation, the code either exfiltrate some information about the system or download and execute remote code --- Category: MALICIOUS - The campaign ha...

CVE-2025-2687

A vulnerability classified as critical has been found in PHPGurukul eLearning System 1.0. Affected is an unknown function of the file /user/index.php of the component Image Handler. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been...

PHPGurukul eLearning System 代码问题漏洞

PHPGurukul eLearning System is an eLearning system from PHPGurukul Inc. A code issue vulnerability exists in version 1.0 of the PHPGurukul eLearning System, which stems from an image processing component in the file /user/index.php that could lead to unlimited uploads...

Malicious code in yolov8mini (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a9222d20b84ed716d5bdf81f1da1d0f088fc7482894c8f25a5d1f757cc477ba9 On importing the module, there is an automated start of a Telegram bot capable of exfiltrating passwords from browsers, executing arbitrary commands and so on...

Malicious code in codeoptimizer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7ae236bbeace8d7b056d4827059bc1f4b6314e57e75827ce5a980ac9dfb991c2 On importing the module, there is an automated start of a Telegram bot capable of exfiltrating passwords from browsers, executing arbitrary commands and so on...

CVE-2025-2661

A vulnerability was found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This issue affects some unknown processing of the file /staff/index.php. The manipulation of the argument e leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-2659

A vulnerability, which was classified as critical, was found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /student/index.php. The manipulation of the argument e leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-2660

A vulnerability has been found in Project Worlds Online Time Table Generator 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument e leads to sql injection. The attack can be initiated remotely. The exploit has been...