Lucene search
K

6 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/10 8:26 p.m.3 views

Malicious code in gclient-eval (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5e9ffb1a50c4ad309a03eadf4dd05776ca6e5ac0e03e118c1f7c74bb2c1d5b3f Research packages targeting typosquatting and dependency confusions, without really harmful behaviour - just calling home through DNS resolver. Related to...

7.2AI score
Exploits0References1
OSV
OSV
added 2025/06/10 8:26 p.m.2 views

MAL-2025-191737 Malicious code in gclient-eval (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5e9ffb1a50c4ad309a03eadf4dd05776ca6e5ac0e03e118c1f7c74bb2c1d5b3f Research packages targeting typosquatting and dependency confusions, without really harmful behaviour - just calling home through DNS resolver. Related to...

7.1AI score
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:29 a.m.7 views

CVE-2024-41253

goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component...

7.1CVSS7.2AI score0.0008EPSS
Exploits0References1
NVD
NVD
added 2024/07/31 9:15 p.m.11 views

CVE-2024-41253

goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component...

7.1CVSS0.0008EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/07/31 12:0 a.m.17 views

CVE-2024-41253

goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component...

0.0008EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/07/31 12:0 a.m.16 views

CVE-2024-41253

goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component...

7.4AI score0.0008EPSS
Exploits0References1
Rows per page
Query Builder