Malicious code in selfpaypalpywgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4064d47bc870e0480f7a3fa391303decf025018163750f0e10cacece802ddbe7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpinggetcc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9cc87e4cddc3d0de7686f192996003553aa6ab4079445e5d9055d43fd6a036e5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5582 Malicious code in py-randpushint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 146005bc98bb087e4a34d633963bd44e028cadb52efce0a3dc258525a9db90b8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5916 Malicious code in replacead (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1fb6fb22080ac44927788f9baf73c4d5bee78202eaa9df5733c53dfa98e75104 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4947 Malicious code in proofproof (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 01fc026e13ec6e4f17dd3b6c1fc4eacbfadd4dffd1bd705f9d4c27afcea3add3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3674 Malicious code in guicontrol (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7527fbc69195cdabe09ba7d6ca9d87dde958d4b13f3fc2ead731bcee8816a626 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

For the visually impaired <= 0.58 - Cross-Site Request Forgery (CSRF)

The plugin does not protect its vipluginsetupmenu function against CSRF attacks, allowing an unauthenticated attacker to update plugin settings by tricking a logged in user to submit a crafted request...

K7521: Stack-based buffer overflow vulnerability in web browser plug-in

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

K13351036: DPDK vulnerabilities CVE-2020-10722 and CVE-2020-10723

Security Advisory Description CVE-2020-10722 A vulnerability was found in DPDK versions 18.05 and above. A missing check for an integer overflow in vhostusersetlogbase could result in a smaller memory map than requested, possibly allowing memory corruption. CVE-2020-10723 A memory corruption issu...

K8008: Forcing a session ID into a user login

Security Advisory Description Note : Versions that are not listed in this Solution have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the ...

K7528: Heap-based buffer overflow vulnerability in ActiveX control

Security Advisory Description Note: Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F5...

MAL-2023-668 Malicious code in paysafe-wac-web-chatbot-lib-fe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 607c4692c6a631f5514a914240622977d22fb3fbc467f6bdc0b132532b3454b6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-20321 · Unknown · Uptime Kuma

Name of the Vulnerable Software and Affected Versions: Uptime Kuma versions prior to 1.20.0 Description: Uptime Kuma is a self-hosted monitoring tool. The name parameter in Uptime Kuma allows a persistent XSS attack. Users are advised to upgrade as there are no known workarounds for this issue...

CVE-2023-25805 versionn Command Injection Vulnerability

versionn, software for changing version information across multiple files, has a command injection vulnerability in all versions prior to version 1.1.0. This issue is patched in version 1.1.0...

SUSE-SU-2023:0460-1 Security update for prometheus-ha_cluster_exporter

This update for prometheus-haclusterexporter fixes the following issues: Updated to version 1.3.1: - CVE-2022-46146: Fixed authentication bypass via cache poisoning in prometheus/exporter-toolkit bsc1208046, bsc1208047...

OSV-2023-77 Heap-buffer-overflow in H5C__load_cache_image

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=56075 Crash type: Heap-buffer-overflow READ 4 Crash state: H5Cloadcacheimage H5Cprotect H5ACprotect...

DLA-3323-1 c-ares - security update

Bulletin has no description...

DLA-3321-1 gnutls28 - security update

Bulletin has no description...

CVE-2021-34182

An issue in ttyd v.1.6.3 allows attacker to execute arbitrary code via default configuration permissions...

PYSEC-2023-289

An issue in Plone CMS v. 5.2.4, 5.2.3, 5.2.2, 5.2.1, 5.2.0, 5.1rc2, 5.1rc1, 5.1b4, 5.1b3, 5.1b2, 5.1a2, 5.1a1, 5.1.7, 5.1.6, 5.1.5, 5.1.4, 5.1.2, 5.1.1 5.1, 5.0rc3, 5.0rc2, 5.0rc1, 5.0.9, 5.0.8, 5.0.7, 5.0.6, 5.0.5, 5.0.4, 5.0.3, 5.0.2, 5.0.10, 5.0.1, 5.0, 4.3.9, 4.3.8, 4.3.7, 4.3.6, 4.3.5, 4.3.4...