22939 matches found
CVE-2024-49833 Improper Validation of Array Index in Camera
Memory corruption can occur in the camera when an invalid CID is used...
CVE-2024-49832
CVE-2024-49832 concerns Qualcomm camera hardware. The root cause is memory corruption caused by an unusually high number of nodes passed to the AXI port, enabling memory corruption in the Camera subsystem. The CVSS v3.1 metrics indicate local exploitation with low privileges and no user interacti...
CVE-2024-49832 Improper Validation of Array Index in Camera
Memory corruption in Camera due to unusually high number of nodes passed to AXI port...
CVE-2024-45582
CVE-2024-45582 affects Qualcomm camera kernel: memory corruption during validation of the number of devices in the camera core. Root cause described as an input/array validation issue leading to memory corruption. CVSS metrics indicate local access, low attack complexity with low privileges, and ...
CVE-2024-45582 Improper Validation of Array Index in Camera Driver
Memory corruption while validating number of devices in Camera kernel...
SUSE-SU-2025:20053-1 Security update for python-setuptools
This update for python-setuptools fixes the following issues: - CVE-2024-6345: Fixed code execution via download functions in the packageindex module in pypa/setuptools bsc1228105...
Security update for python-setuptools
This update for python-setuptools fixes the following issues: CVE-2024-6345: Fixed code execution via download functions in the packageindex module in pypa/setuptools bsc1228105 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or...
CmsEasy 路径遍历漏洞
CmsEasy is a content management system CMS for creating responsive websites from China's CmsEasy company. A path traversal vulnerability exists in CmsEasy version 7.7.7.9, which stems from a path traversal caused by the parameter select in...
MAL-2025-1985 Malicious code in novatwo (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1af6bb35b7731df522c58205dc15fd6f54a91770353f372a1649e9bb7020dff6 Code hidden in setup.py downloads and executes multi-stage malicious code. Encrypted code from Github downloads a batch script, which then downloads and starts...
Malicious code in novatwo (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1af6bb35b7731df522c58205dc15fd6f54a91770353f372a1649e9bb7020dff6 Code hidden in setup.py downloads and executes multi-stage malicious code. Encrypted code from Github downloads a batch script, which then downloads and starts...
Malicious code in web3imports (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 84bb9be7600c163a4a67214f02bb476ce8498551fb0195bbe56161287d86c8cf Importing the module starts through init.py the code that download, extracts and starts a remote executable. This has been identified by any.run as a AsyncRAT...
MAL-2025-1965 Malicious code in asynchelpers (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e262ab4b975a2de9c0216656ca3e760d84f3cdacb526340248dd476c31ddeb0d Importing the module starts through init.py the code that download, extracts and starts a remote executable. This has been identified by any.run as a AsyncRAT...
Malicious code in asynchelpers (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e262ab4b975a2de9c0216656ca3e760d84f3cdacb526340248dd476c31ddeb0d Importing the module starts through init.py the code that download, extracts and starts a remote executable. This has been identified by any.run as a AsyncRAT...
MAL-2025-2012 Malicious code in web3imports (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 84bb9be7600c163a4a67214f02bb476ce8498551fb0195bbe56161287d86c8cf Importing the module starts through init.py the code that download, extracts and starts a remote executable. This has been identified by any.run as a AsyncRAT...
TeamCal Neo 跨站脚本漏洞
TeamCal Neo is a calendar-based web application from the individual developer George Lewe. A cross-site scripting vulnerability exists in TeamCal Neo version 3.8.2. An attacker can exploit this vulnerability to execute malicious JavaScript code by injecting code via the abs parameter in...
TeamCal Neo SQL注入漏洞
TeamCal Neo is a calendar-based web application by George Lewe Personal Developer. A SQL injection vulnerability exists in TeamCal Neo version 3.8.2. An attacker can use this vulnerability to inject malicious SQL statements via the "abs" parameter in "/teamcal/src/index.php" to retrieve, update,...
PT-2025-4101 · Unknown · Teamcal Neo
Name of the Vulnerable Software and Affected Versions: TeamCal Neo version 3.8.2 Description: The issue is a Reflected Cross-Site Scripting XSS that allows an attacker to execute malicious JavaScript code. This is achieved by injecting code via the abs parameter in the "/teamcal/src/index.php" AP...
CVE-2025-0847
A vulnerability was found in 1000 Projects Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /index.php of the component Login. The manipulation of the argument email leads to sql injection. The attack can be initiated...
PT-2025-4072 · Unknown · 1000 Projects Employee Task Management System
Name of the Vulnerable Software and Affected Versions: 1000 Projects Employee Task Management System version 1.0 Description: A critical issue affects the Login component of the system, specifically the file /index.php. The manipulation of the email argument leads to sql injection. This issue can...