MAL-2025-47756 Malicious code in datetime-zones (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d1a3d123441a30b70e5c3317307e99636ac6d13c589e7fb1ae0253a6aaa96aaf During import, environment variables are exfiltrated --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...

Linux Distros Unpatched Vulnerability : CVE-2025-6536

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in Tarantool up to 3.3.1 and classified as problematic. Affected by this vulnerability is the function tmtodatetime in the librar...

Linux Distros Unpatched Vulnerability : CVE-2017-5838

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The gstdatetimenewfromiso8601string function in gst/gstdatetime.c in GStreamer before 1.10.3 allows remote attackers to cause a denial of service out-of-bounds...

CVE-2025-8293

The Intl DateTime Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

CVE-2025-8293 Intl DateTime Calendar <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter

The Intl DateTime Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

WordPress Intl DateTime Calendar plugin <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via date Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via date Parameter vulnerability discovered by Gilang in WordPress Plugin Intl DateTime Calendar versions = 1.0.1...

PT-2025-33535 · WordPress · Intl Datetime Calendar

Name of the Vulnerable Software and Affected Versions: Intl DateTime Calendar plugin for WordPress versions up to and including 1.0.1 Description: The Intl DateTime Calendar plugin for WordPress is susceptible to Stored Cross-Site Scripting via the date parameter due to insufficient input...

CVE-2025-8293: Improper Neutralization of Input During Web Page Generation

The Intl DateTime Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘date’ parameter in all versions up to, and including, 1.0.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level...

WordPress plugin Intl DateTime Calendar has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists i...

CVE-2025-8715

creationtimestamp| type| source ---|---|--- 2025-08-14 13:25:09+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115027339401596750 2025-08-14 22:36:29+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lwffnooc5k2w 2025-08-15 06:42:27+00:00| seen|...

CVE-2025-6536 Tarantool datetime.c tm_to_datetime assertion

A vulnerability has been found in Tarantool up to 3.3.1 and classified as problematic. Affected by this vulnerability is the function tmtodatetime in the library src/lib/core/datetime.c. The manipulation leads to reachable assertion. Attacking locally is a requirement. The exploit has been...

Tarantool security vulnerabilities

Tarantool is a computing software from Tarantool Open Source. A security vulnerability exists in Tarantool 3.3.1 and earlier versions, which stems from a reachable assertion issue in the tmtodatetime function in the datetime.c library...

PT-2025-26673

Name of the Vulnerable Software and Affected Versions: Tarantool versions up to 3.3.1 Description: A vulnerability has been found in the tm to datetime function in the library src/lib/core/datetime.c. The manipulation leads to a reachable assertion. Attacking locally is a requirement...

CVE-2025-43545

creationtimestamp| type| source ---|---|--- 2025-05-13 19:21:43+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp36v6kvlo32 2025-05-13 20:48:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3eaf546m2j 2025-05-13...

perl-DateTime-TimeZone bug fix and enhancement update

An update is available for perl-DateTime-TimeZone. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

perl-DateTime-TimeZone bug fix and enhancement update

An update is available for perl-DateTime-TimeZone. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

Malware in my-test002-datetime-momo

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Regular Expression Denial of Service (ReDoS)

Overview gradio is a Python library for easily interacting with trained machine learning models Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS through the gr.Datetime component. An attacker can cause the server to consume excessive CPU resources and...

CVE-2024-10624

A Regular Expression Denial of Service ReDoS vulnerability exists in the gradio-app/gradio repository, affecting the gr.Datetime component. The affected version is git commit 98cbcae. The vulnerability arises from the use of a regular expression ^?:\snow\s?:-\s\d+\sdmhs??\s$ to process user input...

Gradio resource management error vulnerability

Gradio, an open source Python library from Gradio Open Source, is a method for demonstrating machine learning models through a friendly web interface. A resource management error vulnerability exists in Gradio version 98cbcae, which stems from a regular expression used by the gr.Datetime componen...