Lucene search
+L

7 matches found

OSV
OSV
•added 2025/06/10 8:26 p.m.•10 views

MAL-2025-191737 Malicious code in gclient-eval (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5e9ffb1a50c4ad309a03eadf4dd05776ca6e5ac0e03e118c1f7c74bb2c1d5b3f Research packages targeting typosquatting and dependency confusions, without really harmful behaviour - just calling home through DNS resolver. Related to...

7.1AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/06/10 8:26 p.m.•8 views

Malicious code in gclient-eval (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5e9ffb1a50c4ad309a03eadf4dd05776ca6e5ac0e03e118c1f7c74bb2c1d5b3f Research packages targeting typosquatting and dependency confusions, without really harmful behaviour - just calling home through DNS resolver. Related to...

7.2AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 9:29 a.m.•18 views

CVE-2024-41253

goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component...

7.1CVSS7.2AI score0.00122EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/31 9:15 p.m.•25 views

CVE-2024-41253

goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component...

7.1CVSS0.00122EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/31 12:00 a.m.•25 views

CVE-2024-41253

goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component...

7.4AI score0.00122EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/31 12:00 a.m.•33 views

CVE-2024-41253

goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component...

0.00122EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/31 12:00 a.m.•2 views

CVE-2024-41253: Missing Validation of OpenSSL Certificate

goframe v2.7.2 is configured to skip TLS certificate verification, possibly allowing attackers to execute a man-in-the-middle attack via the gclient component...

7.1CVSS6AI score0.00122EPSS
SaveExploits0References1
Rows per page
Query Builder