2902 matches found
Ubuntu 18.04 LTS / 20.04 LTS : KiCad vulnerabilities (USN-7466-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7466-1 advisory. It was discovered that KiCad incorrectly handled memory when opening malicious files. An attacker could possibly use this issue to cause a...
MAL-2025-4271 Malicious code in web3wallet (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e85209b2472e1db082515ccc7ca0b38a2e268379adc9547ac41af812aebc6fd7 Package contains just a function to send out data. It or a package sharing the same IoCs is used in a malicious GitHub project to exfiltrate crypto currency...
MAL-2025-4272 Malicious code in web3yrpcs (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 171ec4f4bbfb34688348ecdda292249487574c8fb28caf8467c0bbafb1563cb7 Package contains just a function to send out data. It or a package sharing the same IoCs is used in a malicious GitHub project to exfiltrate crypto currency...
MAL-2025-4273 Malicious code in websign (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 25ea98e45fc0e99bfc731d77e2205bd14c901fc33ba6b8639b441b97739db0e2 Package contains just a function to send out data. It or a package sharing the same IoCs is used in a malicious GitHub project to exfiltrate crypto currency...
The dangers of web based messaging apps
TL;DR Anyone with a web browser and access to your phone in an unlocked state could potentially set up persistent access to your secure messaging platforms without needing to know your credentials!. Whilst this clearly requires unfettered access to your phone, scenarios such as screen replacement...
Ubuntu: Security Advisory (USN-7458-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Tenable Nessus < 10.8.4 Multiple Vulnerabilities (TNS-2025-05)
According to its self-reported version, the Tenable Nessus application running on the remote host is prior to 10.8.4. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2025-05 advisory. - libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference ...
ROS-20250424-09
The vulnerability in Google Chrome and Microsoft Edge browsers is related to the possibility of memory usage after a release. Exploitation of the vulnerability could allow a remote attacker to affect the confidentiality, integrity, and availability of protected information. confidentiality,...
GHSA-2JH5-G5CH-43Q5 YoutubeDLSharp allows command injection on windows system due to non sanitized arguments
Summary This vulnerability only apply when running on a Windows OS. An unsafe conversion of arguments allows the injection of a malicous commands when starting yt-dlp from a commands prompt. !CAUTION NOTE THAT DEPENDING ON THE CONTEXT AND WHERE THE LIBRARY IS USED, THIS MAY HAVE MORE SEVERE...
MAL-2025-3480 Malicious code in web3connectpy (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-3404 Malicious code in liquity2 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-4203 Malicious code in aioasyncsqlite (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9dabf7e852a633394c9df21ee491c5a3582e2c172c624fd2b48cc127dbdc410a Clone of aiosqlite with hidden exfiltration of selected data during "executeall" query see L59-97 --- Category: MALICIOUS - The campaign has clearly malicious...
MAL-2025-4204 Malicious code in aiolitesql (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 1ef59c4a17296925677ec69703d25a3bd0541eb1c20eba25b0bc6918e908ddcf Clone of aiosqlite with hidden exfiltration of selected data during "executeall" query see L59-97 --- Category: MALICIOUS - The campaign has clearly malicious...
PT-2025-17470 · Ibm · Ibm Maximo Asset Management
Name of the Vulnerable Software and Affected Versions: IBM Maximo Asset Management version 7.6.1.3 Description: The issue allows an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. This is due to a...
MAL-2025-3248 Malicious code in fatfingers-hellooo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea42b9a5e56641f6c3e9c1a3e1ebcb7adb7866c55d2fec0542f9fb6f2d37f6c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-17201 · Jetbrains · Rubymine
Name of the Vulnerable Software and Affected Versions: JetBrains RubyMine versions prior to 2025.1 Description: The issue concerns JetBrains RubyMine, where the remote Interpreter overwrote ports to listen on all interfaces. This could potentially lead to security risks. No information is provide...
Product Walkthrough: A Look Inside Wing Security's Layered SaaS Identity Defense
Intro: Why hack in when you can log in? SaaS applications are the backbone of modern organizations, powering productivity and operational efficiency. But every new app introduces critical security risks through app integrations and multiple users, creating easy access points for threat actors. As...
Oracle OpenJDK 8.x - 24.x Multiple Vulnerabilities (Apr 2025)
Oracle OpenJDK is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:openjdk"; ifdescripti...
Firmware Version Change Detected (High)
Changes in the controller firmware represent a major change in the behavior of the device and usually cause a temporary interruption of operations. An attacker could use firmware changes to add malicious code to the controller, causing it to perform harmful operations which are hard to detect. Th...
