CVE-2024-6345

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

AZL-43329 CVE-2024-6345 affecting package python-setuptools for versions less than 69.0.3-4

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

AZL-43326 CVE-2024-6345 affecting package python-pip for versions less than 24.2-1

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

DEBIAN-CVE-2024-6345

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

CVE-2024-6345

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

CVE-2024-6345

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

CVE-2024-6345

CVE-2024-6345 affects the setuptools package_index module in setuptools versions up to 69.1.1, enabling remote code execution through user-controlled package download inputs. The vulnerability stems from download functions that can be fed URLs from users or index servers, allowing arbitrary comma...

CVE-2024-6345 Remote Code Execution in pypa/setuptools

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

CVE-2024-6345 Remote Code Execution in pypa/setuptools

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

CVE-2024-6345 Remote Code Execution in pypa/setuptools

A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...

setuptools Code Injection Vulnerability

setuptools is a Python library open-sourced by PyPI. A code injection vulnerability exists in setuptools version 69.1.1 and earlier, which stems from allowing remote code execution via the download function and is vulnerable to code injection attacks...

PT-2024-5237

Name of the Vulnerable Software and Affected Versions: pypa/setuptools versions up to 69.1.1 Description: A vulnerability in the package index module of pypa/setuptools allows for remote code execution via its download functions. These functions, which are used to download packages from URLs...

CVAD Workspace App (Windows, MAC, Linux)

Introduction This article is a summary of the top support articles related to CVAD Workspace App Windows, MAC, Linux Overview of the Issue Provide a brief yet comprehensive overview of the issue, outlining the common challenges and key points that will be addressed in detail in the linked content...

SUSE CVE-2024-22033

The OBS service obs-service-downloadurl was vulnerable to a command injection vulnerability. The attacker could provide a configuration to the service that allowed to execute command in later steps...

Failure of TSBBDM.BIN File Download

Downloadingtsbbdm.bin fails as shown in the following screenshot:...

How to Test a Network Throughput Using Iperf

This article describes how to test a network throughput using Iperf. Iperf allows administrators and engineers to test throughput between any two hosts, including physical systems and Virtual Machines VMrunning on XenServer. Requirements Iperf for Windows Download a copy of Iperf for Windows. Thi...

The vulnerability of the U-Boot network media player Chromecast’s downloader allows a hacker to bypass the secure download mechanism.

The vulnerability of the U-Boot network media player Chromecast relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to bypass the secure download mechanism...

WordPress MakeStories (for Google Web Stories) plugin <= 3.0.3 - Arbitrary File Download and SSRF vulnerability

Arbitrary File Download and SSRF vulnerability discovered by Majed Refaea Patchstack Alliance in WordPress Plugin MakeStories for Google Web Stories versions = 3.0.3...

WordPress Download Button for Elementor plugin <= 1.2.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Khalid Patchstack Alliance in WordPress Plugin Download Button for Elementor versions = 1.2.1...

WordPress MakeStories (for Google Web Stories) Plugin <= 3.0.3 is vulnerable to Arbitrary File Download

Software MakeStories for Google Web Stories Type Plugin Vulnerable versions = 3.0.3 Fixed in 3.0.4 OWASP Top 10 A1: Broken Access Control Classification Arbitrary File Download CVE CVE-2024-38746 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID 40afb38048ba Credits Majed...