Lucene search
+L

7635 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/09 4:55 p.m.•43 views

Malicious code in qlinforge (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713a696ce725031aab16903d7a29c80611a4c4368c7e35bacf29069a3581c602 setup.py registers a custom install command that, on Linux, downloads an opaque binary from http://115.190.124.243:9090/payloadlinuxamd64 to...

6.3AI score
SaveExploits0References4
OSV
OSV
•added 2026/07/09 4:55 p.m.•27 views

MAL-2026-10091 Malicious code in qlinforge (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 713a696ce725031aab16903d7a29c80611a4c4368c7e35bacf29069a3581c602 setup.py registers a custom install command that, on Linux, downloads an opaque binary from http://115.190.124.243:9090/payloadlinuxamd64 to...

6.3AI score
SaveExploits0References4
OSV
OSV
•added 2026/07/09 4:49 p.m.•16 views

PYSEC-2026-2801 Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0 corresponds with OpenCV-Python 4.1.0.25. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An...

8.8CVSS8.2AI score0.21108EPSS
SaveExploits1References9
PyPA
PyPA
•added 2026/07/09 4:49 p.m.•30 views

Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0 corresponds with OpenCV-Python 4.1.0.25. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An...

8.8CVSS8.2AI score0.21108EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
•added 2026/07/09 4:49 p.m.•22 views

Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0 corresponds with OpenCV-Python 4.1.0.25. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An...

8.8CVSS8.2AI score0.21108EPSS
SaveExploits1References9Affected Software1
OSV
OSV
•added 2026/07/09 4:49 p.m.•14 views

PYSEC-2026-2841 Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, version 4.1.0 corresponds with OpenCV-Python version 4.1.2.30. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code...

8.8CVSS8.2AI score0.10704EPSS
SaveExploits1References10
OSV
OSV
•added 2026/07/09 4:49 p.m.•14 views

PYSEC-2026-2828 Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, version 4.1.0 corresponds with OpenCV-Python version 4.1.2.30. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code...

8.8CVSS8.2AI score0.10704EPSS
SaveExploits1References10
PyPA
PyPA
•added 2026/07/09 4:49 p.m.•19 views

Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, version 4.1.0 corresponds with OpenCV-Python version 4.1.2.30. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code...

8.8CVSS8.2AI score0.10704EPSS
SaveExploits1References10Affected Software1
PyPA
PyPA
•added 2026/07/09 4:49 p.m.•23 views

Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, version 4.1.0 corresponds with OpenCV-Python version 4.1.2.30. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code...

8.8CVSS8.2AI score0.10704EPSS
SaveExploits1References10Affected Software1
OSV
OSV
•added 2026/07/09 4:49 p.m.•16 views

PYSEC-2026-2840 Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0 corresponds with OpenCV-Python 4.1.0.25. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An...

8.8CVSS8.2AI score0.21108EPSS
SaveExploits1References9
PyPA
PyPA
•added 2026/07/09 4:49 p.m.•24 views

Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, version 4.1.0 corresponds with OpenCV-Python version 4.1.2.30. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code...

8.8CVSS8.2AI score0.10704EPSS
SaveExploits1References10Affected Software1
PyPA
PyPA
•added 2026/07/09 4:49 p.m.•26 views

Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0 corresponds with OpenCV-Python 4.1.0.25. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An...

8.8CVSS8.2AI score0.21108EPSS
SaveExploits1References9Affected Software1
OSV
OSV
•added 2026/07/09 4:49 p.m.•14 views

PYSEC-2026-2826 Out-of-bounds Write in OpenCV

An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0 corresponds with OpenCV-Python 4.1.0.25. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An...

8.8CVSS8.2AI score0.21108EPSS
SaveExploits1References9
OSV
OSV
•added 2026/07/09 4:49 p.m.•16 views

PYSEC-2026-2834 NULL Pointer Dereference in OpenCV.

An issue was discovered in OpenCV before 4.1.1 OpenCV-Python before 4.1.1.26. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...

7.5CVSS6.5AI score0.03398EPSS
SaveExploits1References7
PyPA
PyPA
•added 2026/07/09 4:49 p.m.•21 views

NULL Pointer Dereference in OpenCV.

An issue was discovered in OpenCV before 4.1.1 OpenCV-Python before 4.1.1.26. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...

7.5CVSS6.5AI score0.03398EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
•added 2026/07/09 4:49 p.m.•27 views

NULL Pointer Dereference in OpenCV.

An issue was discovered in OpenCV before 4.1.1 OpenCV-Python before 4.1.1.26. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...

7.5CVSS6.5AI score0.03398EPSS
SaveExploits1References7Affected Software1
OSV
OSV
•added 2026/07/09 4:49 p.m.•15 views

PYSEC-2026-2795 NULL Pointer Dereference in OpenCV.

An issue was discovered in OpenCV before 4.1.1 OpenCV-Python before 4.1.1.26. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...

7.5CVSS6.5AI score0.03398EPSS
SaveExploits1References7
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/09 3:55 p.m.•42 views

Malicious code in chunk-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ffcc87316488b883c382ff45dd16c0bccb3cba432351f0716f239f81be79017 The package advertises itself as a 'Pure Node.js chunk parser platform' but its shipped code is a full remote-access trojan under internal identifier...

6.2AI score
SaveExploits0References1
OSV
OSV
•added 2026/07/09 3:55 p.m.•22 views

MAL-2026-10057 Malicious code in chunk-parser (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8ffcc87316488b883c382ff45dd16c0bccb3cba432351f0716f239f81be79017 The package advertises itself as a 'Pure Node.js chunk parser platform' but its shipped code is a full remote-access trojan under internal identifier...

6.2AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/07/09 3:55 p.m.•48 views

Malicious code in type-slint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b5cd26e040f4f4366ed65cca4b70258d276f781e0aab76b99b5573d4007a97d The npm package [email protected] masquerades as the pino logger copied module layout, exports as module.exports.pino, keywords fast/logger/stream/jso...

6.1AI score
SaveExploits0References3
Rows per page
Query Builder