25447 matches found
EUVD-2025-200582
Malicious code in pulsecord PyPI...
EUVD-2025-200237
Stack-based buffer overflow vulnerability in CircutorSGE-PLC1000/SGE-PLC50 v9.0.2. The 'SetLan' function is invoked when a new configuration is applied. This new configuration function is activated by a management web request, which can be invoked by a user when making changes to the 'index.cgi'...
CVE-2025-11789
Out-of-bounds read vulnerability in Circutor SGE-PLC1000/SGE-PLC50 v9.0.2. The 'DownloadFile' function converts a parameter to an integer using 'atoi' and then uses it as an index in the 'FilesDownload' array with '&FilesDownloadiVar2'. If the parameter is too large, it will access memory beyond...
CVE-2025-20373
In Splunk Add-on for Palo Alto Networks versions below 2.0.2, the add-on exposes client secrets in plain text in the internal index during the addition of new “Data Security Accounts“. The vulnerability would require either local access to the log files or administrative access to internal indexe...
EUVD-2025-200651
Malicious code in hooktest3 PyPI...
Malicious code in hooktest3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3d1104ab742749c40acd3c4c989dba15890db64fd22f688dea72727fbc5b9d23 During installation, the package starts a code to retrieve and execute commands from Discord --- Category: MALICIOUS - The campaign has clearly malicious inten...
Integer Overflow
github.com/filecoin-project/go-f3 is vulnerable to a Integer Overflow. The vulnerability is due to improper signer index validation, where a crafted “poison” message can trigger an integer overflow and cause go-f3 to panic, allowing attackers to crash any Filecoin node that directly consumes the...
EUVD-2025-200126
Malicious code in tableate PyPI...
EUVD-2025-200127
Malicious code in tablates PyPI...
CVE-2025-65380
PHPGurukul Billing System 1.0 is vulnerable to SQL Injection in the admin/index.php endpoint. Specifically, the username parameter accepts unvalidated user input, which is then concatenated directly into a backend SQL query...
📄 libxml2 2.9.14 (2022) Heap Buffer Overflow
libxml2 version 2.9.14 2022 proof of concept exploit for a heap buffer overflow in the xmlRegEpxFromParse function in xmlregexp.c. ============================================================================================================================================= | Title : libxml2 2.9.14...
openSUSE 16 Security Update : bash-git-prompt (openSUSE-SU-2025:20130-1)
The remote openSUSE 16 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2025:20130-1 advisory. - CVE-2025-61659: Fixed an issue where predictable files in /tmp were used for a copy of the git index bsc1247489 Tenable has extracted the preceding...
CLSA-2025-1764615456 Update of python3.11-setuptools
CVE:2025-47273: fix path traversal in PackageIndex.download leading to arbitrary file write...
Malicious code in starexx (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-191662 Malicious code in starexx (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in rsa2026 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-191660 Malicious code in rsa2026 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in realstarexx (PyPI)
--- -= Per source details. Do not edit below this line.=-...