995 matches found
Critical Photon OS Security Update - PHSA-2024-5.0-91-0434
Updates of 'python3', 'python3-tornado', 'python3-werkzeug', 'python-webob', 'python-werkzeug', 'python-tornado', 'python3-jinja2', 'python-requests', 'python3-webob', 'python-virtualenv', 'python-gevent', 'python-jinja2' packages of Photon OS have been released...
Python Malware in Zebo-0.1.0 and Cometlogger-0.1 Found Stealing User Data
Fortinet discovers two malicious Python packages, Zebo-0.1.0 and Cometlogger-0.1, designed to steal data, capture keystrokes, and gain system control. Learn about their malicious behavior and how to protect yourself...
Security Bulletin: IBM Fusion HCI Installer is vulnerable to arbitrary code execution, gaining of elevated privileges, obtaining sensitive information, and denial of service due to various Python packages
Summary The IBM Fusion Installer is affected by vulnerabilities in Ansible and Python packages dnspython, requests, certifi and idna. Vulnerabilities include arbitrary code execution, gaining of elevated privileges, obtaining sensitive information, and denial of service. CVE-2023-5764,...
Oracle Linux 8 : python36:3.6 (ELSA-2024-10953)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2024-10953 advisory. python36 python-distro python-docs python-docutils python-nose python-pygments python-pymongo python-PyMySQL python-sqlalchemy python-virtualenv 15.1.0-23 -...
RHEL 9 : python3.9:3.9.21 (RHSA-2024:10983)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:10983 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...
SUSE SLES15 Security Update : SUSE Manager Salt Bundle (SUSE-SU-2024:4021-1)
The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4021-1 advisory. venv-salt-minion: - Security fixes on Python 3.11 interpreter: CVE-2024-7592: Fixed quadratic complexity in parsing -quoted cookie values with...
CVE-2024-11168 vulnerabilities
Vulnerabilities for packages: python...
CVE-2024-11168 vulnerabilities
Vulnerabilities for packages: python...
RHEL 8 : python39:3.9 (RHSA-2024:6220)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:6220 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...
RHEL 8 : python39:3.9 (RHSA-2024:7137)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:7137 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...
RHEL 8 : python39:3.9 (RHSA-2024:8797)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:8797 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...
CVE-2024-50602 vulnerabilities
Vulnerabilities for packages: expat, python...
Fedora: Security Advisory (FEDORA-2024-f1615b58e6)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2024-9287 vulnerabilities
Vulnerabilities for packages: python...
nmigen-yosys (0.9.0.post3527.dev27), yowasp-nextpnr-ecp5 (0.0.0.post2706.dev40) +12 more potentially affected by CVE-2024-47813 via wasmtime (0.20.0)
wasmtime PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on wasmtime and may be impacted: - nmigen-yosys 0.9.0.post3527.dev27 - yowasp-nextpnr-ecp5 0.0.0.post2706.dev40 - yowasp-nextpnr-ecp5-25k 0.0.0.post2706.dev40 -...
Exploit for SQL Injection in Bplugins Html5_Video_Player
EN A PoC exploit scanner for CVE-2024-5522 vulnerability in Wo...
New PondRAT Malware Hidden in Python Packages Targets Software Developers
Threat actors with ties to North Korea have been observed using poisoned Python packages as a way to deliver a new malware called PondRAT as part of an ongoing campaign. PondRAT, according to new findings from Palo Alto Networks Unit 42, is assessed to be a lighter version of POOLRAT aka SIMPLESE...
Developers Beware: Lazarus Group Uses Fake Coding Tests to Spread Malware
Cybersecurity researchers have uncovered a new set of malicious Python packages that target software developers under the guise of coding assessments. "The new samples were tracked to GitHub projects that have been linked to previous, targeted attacks in which developers are lured using fake job...
Researchers Find Over 22,000 Removed PyPI Packages at Risk of Revival Hijack
A new supply chain attack technique targeting the Python Package Index PyPI registry has been exploited in the wild in an attempt to infiltrate downstream organizations. It has been codenamed Revival Hijack by software supply chain security firm JFrog, which said the attack method could be used t...