89 matches found
PT-2025-8758 · Pypi · Imblog
Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns a Python library that scrapes data from a blog page to an IP address associated with other malware distribution attacks. Recommendations: At the moment, there is no...
Malicious code in calcnotepad (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 84ad749380bb774a5cc7da818c03f863ee2838773e46e0a5c4cff469e1647962 Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...
WordPress Limit Login Attempts (Spam Protection) plugin <= 5.3 - IP Address Spoofing to Protection Mechanism Bypass vulnerability
IP Address Spoofing to Protection Mechanism Bypass vulnerability discovered by rezaduty in WordPress Plugin Limit Login Attempts versions = 5.3...
WordPress LOGIN AND REGISTRATION ATTEMPTS LIMIT plugin <= 2.1 - IP Address Spoofing to Protection Mechanism Bypass vulnerability
IP Address Spoofing to Protection Mechanism Bypass vulnerability discovered by rezaduty in WordPress Plugin LOGIN AND REGISTRATION ATTEMPTS LIMIT versions = 2.1...
DEBIAN-CVE-2024-4032
The “ipaddress” module contained incorrect information about whether certain IPv4 and IPv6 addresses were designated as “globally reachable” or “private”. This affected the isprivate and isglobal properties of the ipaddress.IPv4Address, ipaddress.IPv4Network, ipaddress.IPv6Address, and...
curl: TLS certificate check bypass with mbedTLS
A flaw was found in curl. When curl is built to use mbedTLS as the TLS backend, it does not check the server certificate of TLS connections done to a host specified as an IP address...
Tormach PathPilot Controller 安全漏洞
Tormach PathPilot Controller is a series of controllers from Tormach USA. A security vulnerability exists in Tormach PathPilot Controller version v2.9.6. An attacker exploiting this vulnerability could overwrite a hard-coded IP address in the device's memory, thereby disrupting the network...
The vulnerability of the inet_ntoa() function in D-Link DIR-868L router software allows a hacker to trigger buffer overflow attacks.
The vulnerability of the inetntoa function in D-Link DIR-868L router software is caused by buffer overflow on the stack. Exploiting this vulnerability can allow an attacker to trigger a buffer overflow...
Cisco Finesse 授权问题漏洞
Cisco Finesse is a set of call center management software from the U.S. company Cisco Cisco. Cisco Finesse suffers from a denial of service vulnerability that stems from incorrect IP address filtering by the reverse proxy, which can be exploited by an attacker to cause a denial of service DoS...
Malicious Package
Overview bot3o is a malicious package. It attempts typosquatting popular packages. The malicious script is base64 obfuscated located in init.py file and tries to steal the current username, platform and IP information and send them to a remote host. Malicious behavior python import getpass import...
Malicious Package
Overview s3transferss is a malicious package. It attempts typosquatting popular packages. The malicious script is base64 obfuscated located in init.py file and tries to steal the current username, platform and IP information and send them to a remote host. Malicious behavior python import getpass...
Malicious Package
Overview cerifi is a malicious package. It attempts typosquatting popular packages. The malicious script is base64 obfuscated located in init.py file and tries to steal the current username, platform and IP information and send them to a remote host. Malicious behavior python import getpass impor...
Malicious Package
Overview s3tranfer is a malicious package. It attempts typosquatting popular packages. The malicious script is base64 obfuscated located in init.py file and tries to steal the current username, platform and IP information and send them to a remote host. Malicious behavior python import getpass...
Malicious Package
Overview requsets is a malicious package. It attempts typosquatting popular packages. The malicious script is base64 obfuscated located in init.py file and tries to steal the current username, platform and IP information and send them to a remote host. Malicious behavior python import getpass...
Sierra Wireless ALEOS 操作系统命令注入漏洞
Sierra Wireless ALEOS AAF is a framework for creating applications in Sierra Wireless AirLink gateways from Sierra Wireless Canada. A security vulnerability exists in Sierra Wireless ALEOS that originates from a user with valid credentials being able to manipulate IP records to execute arbitrary...
DEBIAN-CVE-2022-43548
A OS Command Injection vulnerability exists in Node.js versions 14.21.1, 16.18.1, 18.12.1, 19.0.1 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.Th...
PT-2022-5804 · Fortinet · Fortiadc
Name of the Vulnerable Software and Affected Versions: FortiADC management interface version 7.1.0 Description: The issue is related to an improper neutralization of input during web page generation, which may allow a remote and authenticated attacker to trigger a stored cross site scripting XSS...
PT-2022-26060 · Mediawiki +1 · Mediawiki +1
Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.35.8 MediaWiki versions 1.36.x through 1.37.4 MediaWiki versions 1.38.x through 1.38.2 Description: An issue was discovered in MediaWiki. When changes made by an IP address are reassigned to a user using...
nodejs: DNS rebinding in --inspect via invalid IP addresses
A vulnerability was found in NodeJS, where the IsAllowedHost check can be easily bypassed because IsIPAddress does not properly check if an IP address is invalid or not. When an invalid IPv4 address is provided for instance, 10.0.2.555 is provided, browsers such as Firefox will make DNS requests ...
