EUVD-2023-32120

Malicious code in bioql PyPI...

CVE-2023-28424

Soko if the code that powers packages.gentoo.org. Prior to version 1.0.2, the two package search handlers, Search and SearchFeed, implemented in pkg/app/handler/packages/search.go, are affected by a SQL injection via the q parameter. As a result, unauthenticated attackers can execute arbitrary SQ...

CVE-2023-28424 Soko SQL Injection vulnerability

Soko if the code that powers packages.gentoo.org. Prior to version 1.0.2, the two package search handlers, Search and SearchFeed, implemented in pkg/app/handler/packages/search.go, are affected by a SQL injection via the q parameter. As a result, unauthenticated attackers can execute arbitrary SQ...

Multiple Gentoo Package Installation Script Permission Gain Leakage

Gentoo dev-db/mysql etc. are database packages from the Gentoo Foundation. installation scripts is one of the installation scripts. A security vulnerability exists in the installation scripts in several Gentoo packages. A local attacker can exploit this vulnerability to gain privileges...