MAL-2023-1907 Malicious code in matpltolib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c335a789dcce1af7de0ef188d9b3a6a90a7e44d4d9187532047186a864607c34 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

dBmonster - Track WiFi Devices With Their Recieved Signal Strength

With dBmonster you are able to scan for nearby WiFi devices and track them trough the signal strength dBm of their sent packets sniffed with TShark. These dBm values will be plotted to a graph with matplotlib. It can help you to identify the exact location of nearby WiFi devices use a directional...

Malicious Package

learninglib is a malicious package. The package is installed as dependency of one of the typosquat of the legitimate Python plotting software matplotlib from PyPI and is designed to infiltrate the PyPI repository that secretly pull in cryptominers on the affected machines...

Malicious Typosquatting

maratlib1 is a malicious package. The package is a typosquat of the legitimate Python plotting software matplotlib from PyPI and is designed to infiltrate the PyPI repository that secretly pull in cryptominers on the affected machines...

Malicious Package

maratlib is a malicious package. The package is a typosquat of the legitimate Python plotting software matplotlib from PyPI and is designed to infiltrate the PyPI repository that secretly pull in cryptominers on the affected machines...

matplotlib.1069221.n5.nabble.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1181679 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2019-10216: ghostscript sandbox bypasses command execution vulnerability alerts-a vulnerability alert-the black bar safety net

2019 Year 8 months 2 days late, Artifex official in ghostscriptf the master branch on the commit merge Bug 701394 repair. Designed to fix CVE-2019-10216 vulnerability. The vulnerability can be directly, bypassing the ghostscript security sandbox, the attacker can read any file or command executio...

ghostscript command execution vulnerability alerts-a vulnerability alert-the black bar safety net

8 on the 21st, Tavis Ormandy disclosed by the mail list hxxps://bugs. chromium. org/p/project-zero/issues/detail? id=1640, and again that ghostscript security sandbox can be bypassed by constructing a malicious image content, can cause the command execution. ghostscript is widely used, ImageMagic...

habu - Network Hacking Toolkit

Habu is to teach and learn some concepts about Python and Network Hacking. These are basic functions that help with some tasks for Ethical Hacking and Penetration Testing. Most of them are related with networking, and the implementations are intended to be understandable for who wants to read the...

CERT Basic Fuzzing Framework: BFF

CERT Basic Fuzzing Framework The CERT Basic Fuzzing Framework BFF is a software testing tool that finds defects in applications that run on the Linux and Mac OS X platforms. BFF performs mutational fuzzing on software that consumes file input. Mutational fuzzing is the act of taking well-formed...

PT-2013-3132 · Matplotlib · Matplotlib

Name of the Vulnerable Software and Affected Versions: matplotlib affected versions not specified Description: The issue is related to a buffer overrun in matplotlib. No additional details are provided about the nature of the issue, affected devices, or real-world incidents. Recommendations: At t...