Lucene search
K

114 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 5 days ago6 views

Malicious code in solana-web3-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector af1a2f1a7c7e3bddb9c8d2fcb8a4c86a6755763c94b95b1eddb81f382318c432 Malicious typosquat impersonating the legitimate Solana Python SDK solana / solana-py and the JS @solana/web3.js. The package ships no SDK...

5.6AI score
Exploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 5 days ago8 views

Malicious code in spl-token-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e05ba3043dc87365ee0b1dc44cc58243b34b6cdccdf258c5bb9218a06a65d336 On import spltokenpy, the package's init.py collects sensitive files from the installer's machine — /.config/solana/id.json Solana wallet key,...

5.8AI score
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/03 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-37712

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the...

7.3CVSS6.2AI score0.00328EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/05/28 8:13 p.m.8 views

CVE-2026-37712

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/cron/class/cronjob.class.php, calluserfuncarray in function job type...

7.3CVSS6.2AI score0.00328EPSS
Exploits0References1
NVD
NVD
added 2026/05/27 3:16 p.m.9 views

CVE-2026-37712

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/cron/class/cronjob.class.php, calluserfuncarray in function job type...

7.3CVSS0.00328EPSS
Exploits0References2
CVE
CVE
added 2026/05/27 12:0 a.m.12 views

CVE-2026-37712

Dolibarr ERP/CRM is affected by CVE-2026-37712 across versions 22.0.0–22.0.4 and 24.0.0-alpha. The issue allows a remote attacker to execute arbitrary code via htdocs/cron/class/cronjob.class.php, leveraging call_user_func_array() in the cron “job type” path. Affected component is the cron job im...

7.3CVSS6.2AI score0.00328EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.9 views

Dolibarr ERP/CRM 安全漏洞

Dolibarr ERP/CRM is a web-based enterprise resource planning ERP and customer relationship management CRM system developed by the Dolibarr Foundation in France. This system can be used to manage products, inventory, invoices, orders, etc. Versions of Dolibarr ERP/CRM from 22.0.0 to 22.0.4, as wel...

7.3CVSS6.1AI score0.00328EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/05/27 12:0 a.m.36 views

CVE-2026-37712

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/cron/class/cronjob.class.php, calluserfuncarray in function job type...

0.00328EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.7 views

PT-2026-43999

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/cron/class/cronjob.class.php, call user func array in function job type...

6.2AI score0.00328EPSS
Exploits0References3
ATTACKERKB
ATTACKERKB
added 2026/05/27 12:0 a.m.6 views

CVE-2026-37712

An issue in Dolibarr ERP/CRM v.22.0.0 through v.22.0.4 and v.24.0.0-alpha allows a remote attacker to execute arbitrary code via the htdocs/cron/class/cronjob.class.php, calluserfuncarray in function job type...

6.2AI score0.00328EPSS
Exploits0References3
EUVD
EUVD
added 2026/04/01 4:51 p.m.1 views

EUVD-2026-17971

CrnMaster cronmaster is a Cronjob management UI with human readable syntax, live logging and log history for cronjobs. Prior to version 2.2.0, an authentication bypass in middleware allows unauthenticated requests with an invalid session cookie to be treated as authenticated when the middleware’s...

8.3CVSS5.9AI score0.00325EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 12:30 p.m.12 views

CVE-2023-40361

SECUDOS Qiata DOMOS OS 4.13 has Insecure Permissions for the previewRm.sh daily cronjob. To exploit this, an attacker needs access as a low-privileged user to the underlying DOMOS system. Every user on the system has write permission for previewRm.sh, which is executed by the root user...

7.8CVSS6.9AI score0.00078EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-11738

Malware in sbrugna...

8.1CVSS8.2AI score0.10782EPSS
Exploits1References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2017-6031

Malware in sbrugna...

8CVSS7.8AI score0.00111EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2022-2919

Malicious code in bioql PyPI...

5.5CVSS5.9AI score0.00122EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-25525

Malicious code in bioql PyPI...

7.8CVSS6.6AI score0.0002EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-44932

Malicious code in bioql PyPI...

7.8CVSS7.6AI score0.00078EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-29924

Malicious code in bioql PyPI...

4.3CVSS6.4AI score0.0014EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/24 3:21 p.m.4 views

CVE-2025-33120

IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges...

7.8CVSS6.4AI score0.0002EPSS
Exploits0References1
OSV
OSV
added 2025/08/22 3:15 p.m.2 views

CVE-2025-33120

IBM QRadar SIEM 7.5 through 7.5.0 UP13 could allow an authenticated user to escalate their privileges via a misconfigured cronjob due to execution with unnecessary privileges...

7.8CVSS5.9AI score
Exploits0References1
Rows per page
Query Builder