Lucene search
K

114 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added yesterday4 views

Malicious code in solana-web3-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6945b0bfcf3be9438852411527a75d1275367ca7a34ea4a28793e6e0c6258ccb During import, the package exfiltrates sensitive data credentials, SSH keys, cryptowallet's data. It also establishes persistence via a cronjob. --- Category:...

5.6AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added yesterday3 views

Malicious code in spl-token-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cda7dee5497d0dc5e9e79265b9ae729b0b821c66baa883f3abe723423614cb43 During import, the package exfiltrates sensitive data credentials, SSH keys, cryptowallet's data. It also establishes persistence via a cronjob. --- Category:...

5.6AI score
Exploits0References1
Tenable Nessus
Tenable Nessus
added 6 days ago7 views

Linux Distros Unpatched Vulnerability : CVE-2026-37712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the...

7.3CVSS6.2AI score0.00328EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/05/28 8:13 p.m.8 views

CVE-2026-37712

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/cron/class/cronjob.class.php, calluserfuncarray in function job type...

7.3CVSS6.2AI score0.00328EPSS
Exploits0References1
NVD
NVD
added 2026/05/27 3:16 p.m.9 views

CVE-2026-37712

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/cron/class/cronjob.class.php, calluserfuncarray in function job type...

7.3CVSS0.00328EPSS
Exploits0References2
CVE
CVE
added 2026/05/27 12:0 a.m.10 views

CVE-2026-37712

Dolibarr ERP/CRM is affected by CVE-2026-37712 across versions 22.0.0–22.0.4 and 24.0.0-alpha. The issue allows a remote attacker to execute arbitrary code via htdocs/cron/class/cronjob.class.php, leveraging call_user_func_array() in the cron “job type” path. Affected component is the cron job im...

7.3CVSS6.2AI score0.00328EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.9 views

Dolibarr ERP/CRM 安全漏洞

Dolibarr ERP/CRM is a web-based enterprise resource planning ERP and customer relationship management CRM system developed by the Dolibarr Foundation in France. This system can be used to manage products, inventory, invoices, orders, etc. Versions of Dolibarr ERP/CRM from 22.0.0 to 22.0.4, as wel...

7.3CVSS6.1AI score0.00328EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/05/27 12:0 a.m.35 views

CVE-2026-37712

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/cron/class/cronjob.class.php, calluserfuncarray in function job type...

0.00328EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/27 12:0 a.m.5 views

CVE-2026-37712

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/cron/class/cronjob.class.php, calluserfuncarray in function job type...

6.2AI score0.00328EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.6 views

PT-2026-43999

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/cron/class/cronjob.class.php, call user func array in function job type...

6.2AI score0.00328EPSS
Exploits0References3
EUVD
EUVD
added 2026/04/01 4:51 p.m.0 views

EUVD-2026-17971

CrnMaster cronmaster is a Cronjob management UI with human readable syntax, live logging and log history for cronjobs. Prior to version 2.2.0, an authentication bypass in middleware allows unauthenticated requests with an invalid session cookie to be treated as authenticated when the middleware’s...

8.3CVSS5.9AI score0.00325EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 12:30 p.m.12 views

CVE-2023-40361

SECUDOS Qiata DOMOS OS 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user...

7.8CVSS6.9AI score0.00078EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-11738

Malware in sbrugna...

8.1CVSS8.2AI score0.10782EPSS
Exploits1References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-6031

Malware in sbrugna...

8CVSS7.8AI score0.00111EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2022-2919

Malicious code in bioql PyPI...

5.5CVSS5.9AI score0.00122EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-25525

Malicious code in bioql PyPI...

7.8CVSS6.6AI score0.0002EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2024-29924

Malicious code in bioql PyPI...

4.3CVSS6.4AI score0.0014EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-44932

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00078EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/08/24 3:21 p.m.4 views

CVE-2025-33120

IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges...

7.8CVSS6.4AI score0.0002EPSS
Exploits0References1
OSV
OSV
added 2025/08/22 3:15 p.m.2 views

CVE-2025-33120

IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges...

7.8CVSS5.9AI score
Exploits0References1
Rows per page
Query Builder