coil (>=1.2.1, <=1.3.7), dkcloudcommand (>=1.0.22, <=1.0.131) +2 more potentially affected by CVE-2024-49766 via werkzeug (0.10.4)

werkzeug PYPI version 0.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - coil =1.2.1, =1.0.22, =1.1.1, =2.0.1 - typedjsonrpc 0.4.0 Source cves: CVE-2024-49766 Source advisory: OSV:GHSA-F9VJ-2WH5-FJ8J...

New PIXHELL Attack Exploits LCD Screen Noise to Exfiltrate Data from Air-Gapped Computers

A new side-channel attack dubbed PIXHELL could be abused to target air-gapped computers by breaching the "audio gap" and exfiltrating sensitive information by taking advantage of the noise generated by pixels on an LCD screen. "Malware in the air-gap and audio-gap computers generates crafted pixe...

coil (>=1.2.1, <=1.3.7), dkcloudcommand (>=1.0.22, <=1.0.131) +2 more potentially affected by CVE-2024-34069 via werkzeug (0.10.4)

werkzeug PYPI version 0.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - coil =1.2.1, =1.0.22, =1.1.1, =2.0.1 - typedjsonrpc 0.4.0 Source cves: CVE-2024-34069 Source advisory: OSV:GHSA-2G68-C3QC-8985...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2023-44271 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2023-44271 Source advisory: OSV:GHSA-8GHJ-P4VJ-MR35...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2023-4863 +1 more via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:PYSEC-2023-175...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2023-4863 +1 more via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:GHSA-J7HP-H8JX-5PPR...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2022-45198 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2022-45198 Source advisory: OSV:GHSA-M2VV-5VJ5-2HM7...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2022-45198 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2022-45198 Source advisory: OSV:PYSEC-2022-42979...

Malicious Package

Overview coil-metrics is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

coil (>=1.2.1, <=1.3.7), dkcloudcommand (>=1.0.22, <=1.0.131) +2 more potentially affected by CVE-2022-29361 via werkzeug (0.10.4)

werkzeug PYPI version 0.10.4 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - coil =1.2.1, =1.0.22, =1.1.1, =2.0.1 - typedjsonrpc 0.4.0 Source cves: CVE-2022-29361 Source advisory: OSV:PYSEC-2022-203...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2020-5311 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2020-5311 Source advisory: OSV:GHSA-R7RM-8J6H-R933...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2020-5312 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2020-5312 Source advisory: OSV:GHSA-P49H-HJVM-JG3H...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2020-10378 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2020-10378 Source advisory: OSV:GHSA-3XV8-3J54-HGRP...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2020-5310 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2020-5310 Source advisory: OSV:GHSA-VCQG-3P29-XW73...

tokyocoil.com Improper Access Control vulnerability OBB-2174727

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2021-23437 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2021-23437 Source advisory: OSV:PYSEC-2021-317...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2021-28677 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2021-28677 Source advisory: OSV:GHSA-Q5HQ-FP76-QMRC...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2021-28676 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2021-28676 Source advisory: OSV:GHSA-7R7M-5H27-29HP...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2021-28678 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2021-28678 Source advisory: OSV:PYSEC-2021-94...

coil (1.2.1), kraken (>=0.2.5, <=0.4.3) potentially affected by CVE-2021-28676 via pillow (2.8.1)

pillow PYPI version 2.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - coil 1.2.1 - kraken =0.2.5, =0.4.3 Source cves: CVE-2021-28676 Source advisory: OSV:PYSEC-2021-92...