25461 matches found
Siemens SIMATIC Devices Improper Validation of Array Index (CVE-2024-35905)
In the Linux kernel, the following vulnerability has been resolved: bpf: Protect against int overflow for stack access size This patch re-introduces protection against the size of access to stack memory being negative; the access size can appear negative as a result of overflowing its signed int...
Siemens SIMATIC Devices Improper Validation of Array Index (CVE-2024-43858)
In the Linux kernel, the following vulnerability has been resolved: jfs: Fix array-index-out-of-bounds in diFree This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...
Siemens SIMATIC Devices Improper Control of Resource Identifiers (CVE-2024-42265)
"In the Linux kernel, the following vulnerability has been resolved: protect the fetch of -fdfd in dodup2 from mispredictions both callers have verified that fd is not greater than -maxfds; however, misprediction might end up with tofree = fdt-fdfd; being speculatively executed. That's wrong for...
Siemens SIMATIC and SCALANCE Devices Improper Validation of Array Index (CVE-2025-21692)
net: sched: fix ets qdisc OOB Indexing This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503404; scriptversion"1.3";...
MAL-2025-191622 Malicious code in donotinstall (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a0c56680f6f4db81ec1ad0691253d592055a3581b00e9c93e3dfd6d448b63212 Package contains obfuscated reverse shell. However, it connects with a local IP only, thus it's much more a test than a malicious action --- Category:...
Malicious code in syschecker (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 81ab746bf511a8c6c41c5776e5688c310a5255c65fda0fad65e31b1ed534dc91 Package downloads and runs an obfuscated bat file, which executes malicious activity according to VirusTotal results. --- Category: MALICIOUS - The campaign ha...
MAL-2025-191663 Malicious code in syschecker (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 81ab746bf511a8c6c41c5776e5688c310a5255c65fda0fad65e31b1ed534dc91 Package downloads and runs an obfuscated bat file, which executes malicious activity according to VirusTotal results. --- Category: MALICIOUS - The campaign ha...
MAL-2025-191665 Malicious code in windowsrequir (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8b1e2404307bae09dee3c7fe01e272b488ca2da014d14ad2a740ed76c89634e8 Package downloads and runs an obfuscated bat file, which executes malicious activity according to VirusTotal results. --- Category: MALICIOUS - The campaign ha...
Malicious code in hexdecli (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 14b72d96ce6a8700ee188783d301dc5f37cd7182ac8082491a75c582184309e4 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...
Malicious code in benign-lib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 09477b048d84611002417894ccb3265d246be0156b096a8b47776960d45e9d3d Package hides an executable inside, and starts it when imported. The sandbox analysis shows only starting a calculator, which suggests it's a research attempt...
MAL-2025-191620 Malicious code in benign-lib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 09477b048d84611002417894ccb3265d246be0156b096a8b47776960d45e9d3d Package hides an executable inside, and starts it when imported. The sandbox analysis shows only starting a calculator, which suggests it's a research attempt...
Malicious code in ethaddrlib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9dc2b3682a4269e98a57e232f473846d94e0c74209349b54e1ccc5c669110c47 Package claims to validate mnemonic, a sensitive part of cryptocurrency system. The responsible functions, however, send given data to a remote service, and no...
SUSE CVE-2025-59942
go-f3 is a Golang implementation of Fast Finality for Filecoin F3. In versions 0.8.6 and below, go-f3 panics when it validates a "poison" messages causing Filecoin nodes consuming F3 messages to become vulnerable. A "poison" message can can cause integer overflow in the signer index validation,...
Malicious code in aiohttp-openssl (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 67b219a81e6b2dd7db78b4b223da914ee7baefd0ab056940d3af0bc3b47846a0 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...
MAL-2025-191617 Malicious code in aiohttp-openssl (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 67b219a81e6b2dd7db78b4b223da914ee7baefd0ab056940d3af0bc3b47846a0 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...
Malicious code in web3eth (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-48910 Malicious code in web3eth (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in trstk (PyPI)
--- -= Per source details. Do not edit below this line.=-...