22923 matches found
Malicious code in astronomios (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 44bb8480782438fda3365b0ffcc74a04ae68477448d543ae51c1744b0cdb4a77 setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
MAL-2025-1964 Malicious code in astronomios (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 44bb8480782438fda3365b0ffcc74a04ae68477448d543ae51c1744b0cdb4a77 setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
Malicious code in astronomio (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 083fa61d5e589b627ba6c1d6db2db22ef6df9cd06e6df5bda08120e2c65bb20d setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
Malicious code in astrono2mio (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5afe73e89e82bc8240384de865b69392288e63d7612b403c8ce3a6c6f42273cb setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
MAL-2025-1962 Malicious code in astrono2mio (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5afe73e89e82bc8240384de865b69392288e63d7612b403c8ce3a6c6f42273cb setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
MAL-2025-1963 Malicious code in astronomio (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 083fa61d5e589b627ba6c1d6db2db22ef6df9cd06e6df5bda08120e2c65bb20d setup.py contains highly obfuscated infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
CVE-2024-57278
A reflected Cross-Site Scripting XSS vulnerability exists in /webscan/sqlmap/index.html in QingScan =v1.8.0. The vulnerability is caused by improper input sanitization of the query parameter, allowing an attacker to inject malicious JavaScript payloads. When a victim accesses a crafted URL...
CVE-2024-57279
A reflected Cross-Site Scripting XSS vulnerability has been identified in the LDAP User Manager = ce92321, specifically in the /setup/index.php endpoint via the returnto parameter. This vulnerability arises due to improper sanitization of user-supplied input, allowing an attacker to inject...
QingScan 安全漏洞
QingScan is a batch vulnerability mining tool by a Chinese daxia individual developer. It is used to glue various good scanners. QingScan v1.8.0 version before the existence of a security vulnerability , the vulnerability stems from /webscan/sqlmap/index.html contains a reflective cross-site...
OPENSUSE-SU-2025:0053-1 Security update for dcmtk
This update for dcmtk fixes the following issues: Update to 3.6.9. See DOCS/CHANGES.368 for the full list of changes Security issues fixed: - CVE-2024-27628: Fixed buffer overflow via the EctEnhancedCT method boo1227235 - CVE-2024-34508: Fixed a segmentation fault via an invalid DIMSE message...
CVE-2021-35072
Possible buffer overflow due to improper validation of array index while processing external DIAG command in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables...
CVE-2022-25695
Memory corruption in MODEM due to Improper Validation of Array Index while processing GSTK Proactive commands in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrago...
CVE-2022-25690
Information disclosure in WLAN due to improper validation of array index while parsing crafted ANQP action frames in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...
PT-2025-5874 · Gilnei Moraes · Phpabook
Name of the Vulnerable Software and Affected Versions: Gilnei Moraes phpABook version 0.9 Description: The issue allows a remote attacker to execute arbitrary code via the rol parameter in "index.php". This is a Cross Site Scripting issue. Recommendations: For Gilnei Moraes phpABook version 0.9,...
Malicious code in nflx-metaflow (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1d317c47382e978342b2098c06b1d0ff46acfefdc5a5ed6ce2b531b1f5b24fe4 Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...
Malicious code in pxz (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2649e06884047fa82f596d9f9b0822080bff93b64a69a9a6090c0640f19ec656 Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...
MAL-2025-1984 Malicious code in nflx-metaflow (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1d317c47382e978342b2098c06b1d0ff46acfefdc5a5ed6ce2b531b1f5b24fe4 Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...
MAL-2025-1986 Malicious code in pxz (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2649e06884047fa82f596d9f9b0822080bff93b64a69a9a6090c0640f19ec656 Packages are designed to collect basic info about the user when importing them, and have no other purpose. While they claim to do so, some packages from the sa...
CVE-2022-46152
OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The function cleanupshmrefs is called by both entryinvokecommand and entryopensession. The commands...