25894 matches found
MAL-2025-47791 Malicious code in nukeport (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 93c339ed9593cfb15c4c9907ec2e2d10c4e7f7acc0fb1acca50cb81d157b0551 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
CVE-2024-57154
Incorrect access control in dts-shop v0.0.1-SNAPSHOT allows attackers to bypass authentication via sending a crafted payload to /admin/auth/index...
CVE-2025-9147
A vulnerability has been found in jasonclark getsemantic up to 040c96eb8cf9947488bd01b8de99b607b0519f7d. The impacted element is an unknown function of the file /index.php. The manipulation of the argument view leads to cross site scripting. Remote exploitation of the attack is possible. The...
CVE-2025-9306
A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/notice/addNotice. The manipulation of the argument noticeSubject results in cross site scripting. It is possible to launch the attack remotely...
CVE-2025-55420
A Reflected Cross Site Scripting XSS vulnerability was found in /index.php in FoxCMS v1.2.6. When a crafted script is sent via a GET request, it is reflected unsanitized into the HTML response. This permits execution of arbitrary JavaScript code when a logged-in user submits the malicious input...
Malicious code in hacktool (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ae918afa1c3b130c4df2aa0a968a44eee15feebeb1c1df562a56feb37db96423 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2025-47771 Malicious code in hacktool (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 ae918afa1c3b130c4df2aa0a968a44eee15feebeb1c1df562a56feb37db96423 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2025-47811 Malicious code in vcdiff-py (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d15d16ed1fc3a2984f207f6b4cf5fbea00fc66ecbf61a57faee650730aaf5c9d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in vcdiff-py (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d15d16ed1fc3a2984f207f6b4cf5fbea00fc66ecbf61a57faee650730aaf5c9d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-47785 Malicious code in lolcrazy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9e3fc2ad284d2b4b286da2fc5762b18aade19bc38871779157c54cdb6ae8b4cd Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
Malicious code in lolcrazy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9e3fc2ad284d2b4b286da2fc5762b18aade19bc38871779157c54cdb6ae8b4cd Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2025-47774 Malicious code in importsetup (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 07d601622d7b27ef8baa4ec8ef05e06c283dd18ace0fba3a856f3a5adbdce69e Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
Malicious code in importsetup (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 07d601622d7b27ef8baa4ec8ef05e06c283dd18ace0fba3a856f3a5adbdce69e Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
Malicious code in python-ledgercommon (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d88522028116659a8646b0f7c4eb4e6218e498b49ebc36927ca0787720d3e1f9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-47799 Malicious code in python-ledgercommon (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d88522028116659a8646b0f7c4eb4e6218e498b49ebc36927ca0787720d3e1f9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
CVE-2025-9298
A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...
CVE-2025-9298
A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...
MAL-2025-47786 Malicious code in medoen (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f0fcf26f9d33d1a5d868d0637274af9fa3be00737221aaef0cbc596e1fc39f9a Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
Malicious code in medoen (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f0fcf26f9d33d1a5d868d0637274af9fa3be00737221aaef0cbc596e1fc39f9a Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
MAL-2025-47793 Malicious code in pacakegenow (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4e6e546396a62564e76e758bc338b07b8567b32dce9f89bdf5a59d3a670eedc9 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...