Malicious code in request-unitest (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-48897 Malicious code in request-unitest (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-48894 Malicious code in my-test-packagexx (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiohttp-ssl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 212da09ca68167bc40e86f1c838fe5aeb5a6656da5ecbbdb5d17df01b2c262d8 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...

MAL-2025-191618 Malicious code in aiohttp-ssl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 212da09ca68167bc40e86f1c838fe5aeb5a6656da5ecbbdb5d17df01b2c262d8 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...

The vulnerability of the get_cache_dir() function in the framework for working with Large Language Models (LLM) like LlamaIndex allows a attacker to execute a cache poisoning attack.

The vulnerability of the getcachedir function in the framework for working with Large Language Models LLM like LlamaIndex is related to the creation of temporary files with insecure permissions. Exploiting this vulnerability could allow an attacker to execute a cache poisoning attack...

VulnerabilityAgent

VulnerabilityAgent 🛡️ An autonomous agent built on the BeeAI...

CVE-2025-53051

Vulnerability in the RDBMS Functional Index component of Oracle Database Server. Supported versions that are affected are 23.4-23.9. Easily exploitable vulnerability allows high privileged attacker having SYSDBA privilege with network access via Oracle Net to compromise RDBMS Functional Index...

Malicious code in smart-scheduler (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2792dcc5f5baaa05e1da756d9e57efedf800477f8b30e3c0b096d0baa17f59c9 Package downloads and starts a malicious executable and hides its existence --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2025-191661 Malicious code in smart-scheduler (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2792dcc5f5baaa05e1da756d9e57efedf800477f8b30e3c0b096d0baa17f59c9 Package downloads and starts a malicious executable and hides its existence --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

MAL-2025-191657 Malicious code in requests-os (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c944343070e83d2eab122e862b5c7349722ee7ceae5ae21e428926480681d24f Package contains capabilities for remote control of the user's computer and exfiltrating data --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in lbank-connector-pythons (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e2d03134723d75ab2f0b36c6acad54fa5d16b4ba0f04bf2705e188fd19626b9 This is a copy of a legit package with added basic exfiltration in the setup.py --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages,...

Malicious code in asynhttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 058c3bab076ccb770a3ecaefbdb301df88bd935a79f154cdeb329c51c4a1eef5 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...

MAL-2025-191619 Malicious code in asynhttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 058c3bab076ccb770a3ecaefbdb301df88bd935a79f154cdeb329c51c4a1eef5 Packages silently decrypt content hidden in a dependency and load them as Python extension modules. In the first wave, those are copies of legitimate aiohttp a...

Malicious code in libtasnl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0da2df30cd680f292df7b195f51829e4afc94604336223d58b0bfca92714d9fc Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

MAL-2025-191645 Malicious code in libtasnl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0da2df30cd680f292df7b195f51829e4afc94604336223d58b0bfca92714d9fc Generic campaign for all likely research / pentests, where the amount or art of collected data raises questions about the privacy, security and ethical side. -...

Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in llama_index-0.12.29-py3-none-any.whl CVE-2025-1793

Summary Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in llamaindex-0.12.29-py3-none-any.whl CVE-2025-1793 Vulnerability Details CVEID:CVE-2025-1793 DESCRIPTION: Multiple vector store integrations in run-llama/llamaindex version v0.12.21 have SQL injection...

libyal:libfsntfs_volume_fuzzer: Heap-buffer-overflow in libfsntfs_index_value_read

Detailed Report: https://oss-fuzz.com/testcase?key=4979273434988544 Project: libyal Fuzzing Engine: libFuzzer Fuzz Target: libfsntfsvolumefuzzer Job Type: libfuzzerasanlibyal Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7921ee5e0839 Crash State:...

CVE-2025-60934

Multiple stored cross-site scripting XSS vulnerabilities in the index.php component of HR Performance Solutions Performance Pro v3.19.17 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Employee Notes, title, or description parameters. The patched...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a system index node linking to a directory hierarchy, which could lead to further file system corruption and...