CVE-2026-32979

OpenClaw CVE-2026-32979 affects versions prior to 2026.3.11, where an approval integrity vulnerability enables attackers to execute rewritten local code by modifying scripts between approval and execution when exact file binding cannot occur. Remote attackers can alter approved local scripts befo...

Malicious code in sonic-platform-common (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0b7ad70e46087b1ffe41c3d0670c24c58b38e72344c958458af49a25541778b4 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

PT-2026-29229

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.8 Description The software contains an approval bypass issue in the system.run function where mutable script operands are not properly bound during the approval and execution stages. This allows attackers to...

MAL-2026-1029 Malicious code in geocommunes-geoportal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 818beaf9a2c40fe1d288ab5f872c124eb851c191110b30d222a884e0cbec50b5 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

ShellExploit

This project is no longer supported PowerSploit is a col...

Malicious code in securedrop-workstation-dom0-config (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a496fb67ea100acce3d945e16e2d50d6d3181a322017f80cdf8c01006a49aade Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

CVE-2025-63220

The Sound4 FIRST audio processor's web-based management interface is vulnerable to Remote Code Execution (RCE) . The root cause is a failure in the firmware update mechanism to validate the integrity of the manual.sh script. An attacker can exploit this by injecting arbitrary commands into the sc...

CVE-2025-63215

The Sound4 IMPACT web-based management interface is vulnerable to Remote Code Execution RCE via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the...

EUVD-2011-4145

Malware in sbrugna...

EUVD-2020-20433

Malware in sbrugna...

EUVD-2008-0896

Malware in sbrugna...

EUVD-2006-5648

Malware in sbrugna...

EUVD-2017-0374

Malware in sbrugna...

EUVD-2025-30799

Malicious code in bioql PyPI...

EUVD-2022-44768

Malicious code in bioql PyPI...

CVE-2021-32464

An incorrect permission assignment privilege escalation vulnerability in Trend Micro Apex One, Apex One as a Service and Worry-Free Business Security Services could allow an attacker to modify a specific script before it is executed. Please note: an attacker must first obtain the ability to execu...

CVE-2011-4202

The Tadasoft Restorepoint 3.2 evaluation image uses weak permissions www write access for unspecified scripts, which allows local users to gain privileges by modifying a script file...

CVE-2024-9950 Abuse of Unauthenticated Compliance Recheck in SecureConnector

A vulnerability in Forescout SecureConnector v11.3.07.0109 on Windows allows unauthenticated user to modify compliance scripts due to insecure temporary directory...

Malicious code in rtxt-dep2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3a0cd03149005afa6cc505bea16d80c21f5bbbd226c16c659ed6abb41cf730a2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

The vulnerability of the Rockwell Automation FactoryTalk View SE human-machine interface control software lies in the improper assignment of permissions to critical resources, allowing a perpetrator to increase their privileges.

The vulnerability of the Rockwell Automation FactoryTalk View SE human-machine interface management software is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow an attacker to enhance their privileges by modifying scripts...