29086 matches found
GHSA-CGVX-9447-VCCH ntlk unsafe deserialization vulnerability
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...
DEBIAN-CVE-2024-39705
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...
CVE-2024-39705
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...
PT-2024-36527 · Unknown · Stitionai/Devika
Name of the Vulnerable Software and Affected Versions: stitutionai/devika repository affected versions not specified Description: A directory traversal issue exists, specifically within the "/api/download-project" endpoint. Attackers can exploit this by manipulating the project name parameter in ...
PT-2024-36524 · Devika · Devika
Name of the Vulnerable Software and Affected Versions: stitutionai/devika repository version latest Description: A directory traversal issue exists in the "/api/download-project-pdf" endpoint due to insufficient sanitization of the project name parameter in the download project pdf function. This...
NLTK Security Vulnerabilities
NLTK is a natural language toolkit. It is used to support research and development in natural language processing. A security vulnerability exists in NLTK version 3.8.1 and prior versions, which stems from a vulnerability that could lead to remote code execution if the integrated packet download...
CVE-2024-39705
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...
CVE-2024-39705
NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used. This affects, for example, averagedperceptrontagger and punkt...
New “Snowblind” Android Malware Steals Logins, Bypasses Security Features
New Android Malware "Snowblind" bypasses security! It exploits Linux's seccomp to launch scalable attacks and steal your data. Download safely, update your device, and consider mobile security to stay protected...
Cross-site Scripting (XSS)
org.dspace:dspace-server-webapp is vulnerable to Cross-site Scripting XSS. The vulnerability is caused by improper validation of download behavior for HTML, XML, or JavaScript Bitstreams, allowing embedded JavaScript to execute in the user's browser, which could potentially lead to XSS attacks...
CVE-2024-29954
A vulnerability in a password management API in Brocade Fabric OS versions before v9.2.1, v9.2.0b, v9.1.1d, and v8.2.3e prints sensitive information in log files. This could allow an authenticated user to view the server passwords for protocols such as scp and sftp. Detail. When the...
CVE-2024-29954 password management API prints sensitive information in log files
A vulnerability in a password management API in Brocade Fabric OS versions before v9.2.1, v9.2.0b, v9.1.1d, and v8.2.3e prints sensitive information in log files. This could allow an authenticated user to view the server passwords for protocols such as scp and sftp. Detail. When the...
CVE-2024-29954 password management API prints sensitive information in log files
A vulnerability in a password management API in Brocade Fabric OS versions before v9.2.1, v9.2.0b, v9.1.1d, and v8.2.3e prints sensitive information in log files. This could allow an authenticated user to view the server passwords for protocols such as scp and sftp. Detail. When the...
Malicious code in watch-scream-6-movie-online-hd-at-home-now-4k-free (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2557 Malicious code in john-wick-capitulo-4-pelicula-completa-en-linea-descarga-gratuita-en-123movies (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in john-wick-capitulo-4-pelicula-completa-en-linea-descarga-gratuita-en-123movies (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2554 Malicious code in john-wick-4-2023-pelicula-completa-espa-ol-spanish--marzo-27-30 (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2260 Malicious code in downloads-john-wick-chapter-4-fullmovies-online-from-homees (npm)
--- -= Per source details. Do not edit below this line.=-...