22939 matches found
MAL-2025-1977 Malicious code in hellohackers (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 63788f1f3223270be7955b619eb09fa7e7f401084e4332ed732d33b522782a37 File contains a metapreter beacon that runs in the setup.py. Analysed version uses a local IP as the target. --- Category: MALICIOUS - The campaign has clearly...
CVE-2024-52333
An improper array index validation vulnerability exists in the determineMinMax functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2024-21522
All versions of the package audify are vulnerable to Improper Validation of Array Index when frameSize is provided to the new OpusDecoder.decode or new OpusDecoder.decodeFloat functions it is not checked for negative values. This can lead to a process crash...
CVE-2024-47796
An improper array index validation vulnerability exists in the nowindow functionality of OFFIS DCMTK 3.6.8. A specially crafted DICOM file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2024-5384
A vulnerability classified as critical was found in SourceCodester Facebook News Feed Like 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument page leads to sql injection. The attack can be initiated remotely. VDB-266302 is the identifier assigned ...
CVE-2024-10156
A vulnerability was found in PHPGurukul Boat Booking System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php of the component Sign In Page. The manipulation of the argument username leads to sql injection. The attack can be initiated...
CVE-2024-10336
A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php of the component Admin Login Page. The manipulation of the argument t1 leads to sql injection. The attack may be...
CVE-2024-6065
A vulnerability was found in itsourcecode Bakery Online Ordering System 1.0. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulation of the argument useremail leads to sql injection. The attack may be initiated remotely. The exploit has be...
CVE-2024-24563
Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine. Arrays can be keyed by a signed integer, while they are defined for unsigned integers only. The typechecker doesn't throw when spotting the usage of an int as an index for an array. The typechecker allows the usage of...
CVE-2024-11964
A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management system 1.0. This affects an unknown part of the file /user/index.php. The manipulation of the argument emailid leads to sql injection. It is possible to initiate the attack remotely. The exploit has be...
Huawei EulerOS: Security Advisory for python-setuptools (EulerOS-SA-2025-1084)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-0428
The Index Now plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.6.3. This is due to missing or incorrect nonce validation on the 'resetform' function. This makes it possible for unauthenticated attackers to delete arbitrary site options via a...
MAL-2025-1975 Malicious code in farooq4321 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 165ce280a6d073eebbba054677a6c80307c8353b31e41732ba1ffc1f8a020aa4 Code in setup.py attempts to call a webhook, but most importantly to execute a revshell --- Category: MALICIOUS - The campaign has clearly malicious intent, li...
Malicious code in farooq4321 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 165ce280a6d073eebbba054677a6c80307c8353b31e41732ba1ffc1f8a020aa4 Code in setup.py attempts to call a webhook, but most importantly to execute a revshell --- Category: MALICIOUS - The campaign has clearly malicious intent, li...
Malicious code in requests-x64 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 996690f6aae3ce7456b45309072e2b12f5afda24b2f58e7f66b004c1f2b99872 Code in setup.py attempts to silently download and execute an executable. The file contains a malware --- Category: MALICIOUS - The campaign has clearly...
MAL-2025-1992 Malicious code in requests-x64 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 996690f6aae3ce7456b45309072e2b12f5afda24b2f58e7f66b004c1f2b99872 Code in setup.py attempts to silently download and execute an executable. The file contains a malware --- Category: MALICIOUS - The campaign has clearly...
Malicious code in xmsgpy (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-1009 Malicious code in xmsgpy (PyPI)
--- -= Per source details. Do not edit below this line.=-...