faraday_burp

Faraday Extension for Burp Share the results of your application security work in Faraday https://faradaysec.com This extension will allow you to import requests and issues from your Burp Suite into a Faraday workspace. Download You can get the precompiled extension over here: Download...

datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements

SummaryA malicious input schema OpenAPI / JSON Schema can execute arbitrary Python code on the machine that imports the generated model. The x-python-import and customTypePath schema extensions flow, unsanitized, into the import statements datamodel-code-generator emits. A newline embedded in the...

PYSEC-2026-3557 datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements

Summary A malicious input schema OpenAPI / JSON Schema can execute arbitrary Python code on the machine that imports the generated model. The x-python-import and customTypePath schema extensions flow, unsanitized, into the import statements datamodel-code-generator emits. A newline embedded in th...

datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements

Summary A malicious input schema OpenAPI / JSON Schema can execute arbitrary Python code on the machine that imports the generated model. The x-python-import and customTypePath schema extensions flow, unsanitized, into the import statements datamodel-code-generator emits. A newline embedded in th...

Malware in vite-plugin-esm-import-extension

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in vite-plugin-esm-import-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 769b40ee6390325702297fd5566f36d41bba67cb00a7bd3dbbb369801bc409b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-4453 Malicious code in vite-plugin-esm-import-extension (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 769b40ee6390325702297fd5566f36d41bba67cb00a7bd3dbbb369801bc409b2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2007-3678

Stack-based buffer overflow in the MSWord text-import extension Word 6-2000 Filter.xnt in QuarkXPress 7.2 for Windows, when using the Rectangle Text Box tool for importing text, allows user-assisted remote attackers to execute arbitrary code via a long font name...