22893 matches found
PT-2025-8417
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A NULL pointer dereference issue has been identified in the mt7915 mac fill rx vector routine of the mt76 driver in the Linux kernel. This issue occurs when the chip does not support dbd...
CVE-2025-25789
FoxCMS v1.2.5 was discovered to contain a remote code execution RCE vulnerability via the index method at \controller\Sitemap.php...
MAL-2025-2969 Malicious code in kgmicolors (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0d93708c54253e6772832d4aa1ef7f59e5f4f4c159d5ffaaa4045d8267b15b30 Package contains hidden code that downloads a next stage script, which finally downloads and starts a malware from XWORM family as well as an infostealer ---...
Malicious code in time-service-checker (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 92ae5fc73fd7cc45d02ba02f6c3b667d155f681ba74262d66421edee5f19d237 This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...
Malicious code in serverkeeper-verifier (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 62ec235d314e175928f82504dade8d7f8313bc88707038976e5be6d78709b869 This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...
Malicious code in timekeeper-verifier (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3a20fe9fed2445d097ddfd628d59e1b8149913aec4915c112cacfa9fb7cdfc6e This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...
Malicious code in acloud-client (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4900ca27e14ecb6f022a740bd420fa046084355344379dd21a2b59c53d1c95f1 This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...
Malicious code in credential-python-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6c6598ac9c321af3b0526ddceb5ffc6e78d593e0c3e6bdd259b06c0792705cc6 This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...
MAL-2025-2929 Malicious code in acloud-client (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4900ca27e14ecb6f022a740bd420fa046084355344379dd21a2b59c53d1c95f1 This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...
Malicious code in tcloud-python-test (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 221affa8a84428ae21f288ce299d114742d269e7bbcbf223a0aa666327fae2c4 This campaign is built from two parts: 1 packages named like time-check-server, snapshot-photo contain an innocent-looking code that sends "date" to a remote...
U.S. Dept Of Defense: Sensitive Images & Files Exposed Through Directory Listing
During reconnaissance, a directory listing was identified that provided an index of resources located inside the directory. The specific files exposed were not provided. The affected system host was not disclosed...
GLPI 输入验证错误漏洞
GLPI is an open source IT and asset management software from GLPI Open Source. The software provides a full-featured IT resource management interface , you can use it to create a database to fully manage IT computers , monitors , servers , printers , network devices , telephones , and even toner...
Malicious code in coingenerator (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 78810d9638861bd92d3f96d7e29a552a41eb97b69b8deba84892cc7f458fb8c0 Package contains obfuscated code that exfiltrate basic data and awaits for commands from the remote server to execute them. This is a malicious copy of...
Malicious code in transaction-analysis (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 49ab525dda997f7abc07f4ef30a62443e40a0f01e218b74d6db9b378fe51f2a4 Package contains obfuscated code that exfiltrate basic data and awaits for commands from the remote server to execute them. This is a malicious copy of...
Malicious code in coinanalysis (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 786d19aeeea93da949996b447b05122b0750075cb98b943dcb27c0ea622521ea Package contains obfuscated code that exfiltrate basic data and awaits for commands from the remote server to execute them. This is a malicious copy of...
Malicious code in coinanalyze (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f7faa2aef0e6f2b325d841b405418465db3f0dd601519861d70df45bb4d7adb5 Package contains obfuscated code that exfiltrate basic data and awaits for commands from the remote server to execute them. This is a malicious copy of...
PT-2025-7700
Name of the Vulnerable Software and Affected Versions vTiger CRM version 6.4.0 Description A problematic issue has been identified, affecting the /modules/Mobile/index.php file. The manipulation of the operation argument leads to cross-site scripting. This issue can be exploited remotely...
MAL-2025-3000 Malicious code in solders-utils (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 eff6c26674dd4f0408742c46785656c3a5d19ca0a87366a60534d37d5a54e687 The only thing the package does is send out all the given data about a cryptocurrency transaction, including the private key, to a hardcoded webhook. Feedback...