Lucene search
+L

1346 matches found

Redos
Redos
added 2025/09/24 12:00 a.m.11 views

ROS-20250924-01

The vulnerability of the pip module of the Python programming language is related to the failure to clean data at the control layer. Exploitation of the vulnerability could allow an attacker to change the repository configuration...

5.5CVSS6.9AI score0.00476EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2025/09/24 12:00 a.m.5 views

Ubuntu: Security Advisory (USN-7762-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.02974EPSS
SaveExploits4References3
CNNVD
CNNVD
added 2025/09/24 12:00 a.m.8 views

pip 安全漏洞

pip is a Python package installer open-sourced by the Python Packaging Authority. A security vulnerability exists in pip that stems from a failure to check whether symbolic links point to extracted directories, which could lead to a path traversal attack...

5.9CVSS7.3AI score0.00469EPSS
SaveExploits0References4
OSV
OSV
added 2025/09/19 11:09 a.m.9 views

OESA-2025-2317 python-pip security update

pip is the package installer for Python. You can use pip to install packages from the Python Package Index and other indexes. %global bashcompdir %b=$pkg-config --variable=completionsdir bash-completion 2/dev/null; echo $b:-/bashcompletion.d Name: python-pip Version: 23.3.1 Release: 3 Summary: A...

5.3CVSS6.9AI score0.00441EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2025/09/18 12:00 a.m.6 views

Fedora 42 : python-pip (2025-6d50efcd0c)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-6d50efcd0c advisory. Security fix for the bundled urllib3 for CVE-2025-50181 Tenable has extracted the preceding description block directly from the Fedora security advisory. Not...

6.1CVSS6.4AI score0.00441EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2025/09/18 12:00 a.m.7 views

Fedora: Security Advisory (FEDORA-2025-6d50efcd0c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.1CVSS6.9AI score0.00441EPSS
SaveExploits1References3
Gitee
Gitee
added 2025/09/13 6:50 p.m.118 views

pwntools

This is a CTF Capture The Flag framework and exploit development library. It is a Python library that provides a set of tools for developing exploits and performing penetration testing. The library is designed to be extensible and customizable, allowing users to easily add new features and plugin...

7AI score
SaveExploits0
Fedora
Fedora
added 2025/09/13 2:43 a.m.12 views

[SECURITY] Fedora 41 Update: uv-0.8.11-2.fc41

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

2.3CVSS6.6AI score0.00325EPSS
SaveExploits0
Fedora
Fedora
added 2025/09/12 2:07 a.m.18 views

[SECURITY] Fedora 42 Update: uv-0.8.11-2.fc42

An extremely fast Python package installer and resolver, written in Rust. Designed as a drop-in replacement for common pip and pip-tools workflows. Highlights: =E2=80=A2 =E2=9A=96=EF=B8=8F Drop-in replacement for common pip, pip-tools, and virtualenv commands. =E2=80=A2 =E2=9A=A1=EF=B8=8F 10-100x...

2.3CVSS6.6AI score0.00325EPSS
SaveExploits0
OSV
OSV
added 2025/09/05 5:10 p.m.4 views

MAL-2025-43055 Malicious code in @zalastax/nolb-_pip (npm)

The package @zalastax/nolb-pip was found to contain malicious code...

7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/09/05 5:10 p.m.6 views

Malicious code in @zalastax/nolb-_pip (npm)

The package @zalastax/nolb-pip was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/09/05 11:09 a.m.13 views

OESA-2025-2175 python-pip security update

pip is the package installer for Python. You can use pip to install packages from the Python Package Index and other indexes. %global bashcompdir %b=$pkg-config --variable=completionsdir bash-completion 2/dev/null; echo $b:-/bashcompletion.d Name: python-pip Version: 23.3.1 Release: 3 Summary: A...

5.3CVSS8.5AI score0.0098EPSS
SaveExploits1References2
OSV
OSV
added 2025/09/05 11:09 a.m.15 views

OESA-2025-2173 python-pip security update

pip is the package installer for Python. You can use pip to install packages from the Python Package Index and other indexes. %global bashcompdir %b=$pkg-config --variable=completionsdir bash-completion 2/dev/null; echo $b:-/bashcompletion.d Name: python-pip Version: 23.3.1 Release: 3 Summary: A...

5.3CVSS8.5AI score0.0098EPSS
SaveExploits1References2
Microsoft CVE
Microsoft CVE
added 2025/09/03 9:14 p.m.15 views

pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.

...

2.1CVSS9.3AI score0.00393EPSS
SaveExploits0
OSV
OSV
added 2025/08/28 7:11 a.m.13 views

MAL-2025-41700 Malicious code in malicious-pip-package-for-demo (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/08/24 12:13 a.m.12 views

CVE-2025-55637

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 was discovered to contain a command injection vulnerability via the setddnspipsystem function...

6.5CVSS8.3AI score0.01701EPSS
SaveExploits1References1
NVD
NVD
added 2025/08/22 5:15 p.m.15 views

CVE-2025-55637

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 was discovered to contain a command injection vulnerability via the setddnspipsystem function...

9.8CVSS0.01701EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/08/22 12:00 a.m.8 views

CVE-2025-55637

Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.46622503122283 was discovered to contain a command injection vulnerability via the setddnspipsystem function...

7.7AI score0.01701EPSS
SaveExploits1References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in @zalastax/nolb-pip (npm)

The package @zalastax/nolb-pip was found to contain malicious code...

7AI score
SaveExploits0
OSV
OSV
added 2025/08/14 6:52 p.m.4 views

MAL-2025-13187 Malicious code in @zalastax/nolb-pip (npm)

The package @zalastax/nolb-pip was found to contain malicious code...

7.2AI score
SaveExploits0
Rows per page
Query Builder