25898 matches found
CVE-2025-7761
Lepszy BIP is vulnerable to Reflected Cross-Site Scripting XSS. Improper input validation in index.php form in one of the parameters allows arbitrary JavaScript to be executed on victim's browser when specially crafted URL is opened. The vendor was contacted early about this disclosure but did no...
CVE-2025-52335
EyouCMS 1.7.3 is vulnerale to Cross Site Scripting XSS in index.php, which can be exploited to obtain sensitive information...
CVE-2011-10009
S40 CMS v0.4.2 contains a path traversal vulnerability in its index.php page handler. The p parameter is not properly sanitized, allowing attackers to traverse the file system and access arbitrary files outside the web root. This can be exploited remotely without authentication by appending...
MAL-2025-47803 Malicious code in titifel-pyip (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 db04496b1d3e7bb6d0e4f13530466504551bf243744fb5f0748195d38a11b0f3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in titifel-pyip (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 db04496b1d3e7bb6d0e4f13530466504551bf243744fb5f0748195d38a11b0f3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in libgomp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d390b58898a977fec39e6d1fe725cf5c2bcb09b2ecf4c2294a23d75a56dd71a6 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-47783 Malicious code in libgomp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d390b58898a977fec39e6d1fe725cf5c2bcb09b2ecf4c2294a23d75a56dd71a6 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Linux Distros Unpatched Vulnerability : CVE-2024-38542
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: RDMA/manaib: boundary check before installing cq callbacks Add a boundary check inside...
Linux Distros Unpatched Vulnerability : CVE-2025-38133
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iio: adc: ad4851: fix ad4858 chan pointer handling The pointer returned from...
Linux Distros Unpatched Vulnerability : CVE-2024-42064
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Skip pipe if the pipe idx not set properly why Driver crashes when pipe idx...
Linux Distros Unpatched Vulnerability : CVE-2024-37280
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was discovered in Elasticsearch, affecting document ingestion when an index template contains a dynamic field mapping of passthrough type. Under certain...
Linux Distros Unpatched Vulnerability : CVE-2022-49858
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - octeontx2-pf: Fix SQE threshold checking Current way of checking available SQE count which is based on HW updated SQB count could result in driver submitting an...
Linux Distros Unpatched Vulnerability : CVE-2024-41061
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix array-index-out- of-bounds in dml2/FCLKChangeSupport Why Potential out ...
MAL-2025-41688 Malicious code in iamenumerate (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d673b2612401a11ff219f59a9ca15986b4ce10d098f08d4beb5fbc9dc79ec554 This one package is clearly created as part of the campaign, but the malicious code from the previous version has been removed no other changes. It is anyway...
Malicious code in iamenumerate (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d673b2612401a11ff219f59a9ca15986b4ce10d098f08d4beb5fbc9dc79ec554 This one package is clearly created as part of the campaign, but the malicious code from the previous version has been removed no other changes. It is anyway...
MAL-2025-191767 Malicious code in jsonist (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4c74a199a696dbc18994242bc3c29e9a018ddda51fa2bbe224620d9ded6f1818 Calling a method starts downloading and starting an infostealer script --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...
Malicious code in whiskey-uniform-xqxn (npm)
The package whiskey-uniform-xqxn was found to contain malicious code...
Malicious code in log-zeta-resolve-index-module (npm)
The package log-zeta-resolve-index-module was found to contain malicious code...