Design/Logic Flaw

Improper Neutralization of Input During Web Page Generation vulnerability in Yordam Information Technologies Library Automation System allows Stored XSS.This issue affects Library Automation System: before 19.2...

CVE-2020-5001

creationtimestamp| type| source ---|---|--- 2023-03-02 00:33:51+00:00| seen| https://t.me/cibsecurity/59294 2025-03-06 19:38:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6734...

PT-2023-35663 · Git +1 · Libredwg

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue has been identified, potentially causing a crash. The crash state involves functions such as json cquote, dwg json LTYP...

CVE-2023-22777

CVE-2023-22777 affects ArubaOS web-based management interface. The vulnerability allows an authenticated attacker to read arbitrary files on the underlying OS, due to an information-disclosure flaw. Affected context and impact are documented across multiple sources; exploitation details are not p...

CVE-2023-20932

In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

MAL-2023-3260 Malicious code in esqpullcraftlgtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 56855a5ba83eb08fd0c7aa4cb319b3460f2ae497bba68814ec35776030a13893 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpmineedcv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3049023593c5d4ce0e4461018eaf519a11d2c1ac10e73ecd0d8fc6e3707a2189 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7510 Malicious code in tpramtoolpong (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ae3e26b44442d54fb2306da89fdbf61bff82609d4d25f7be123ffdbfb71beb2b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4209 Malicious code in libmasklibosint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e6586d0282936e32973f50873abfeb547f6f380031dfcb9c9f7e3b5a5baa3036 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3017 Malicious code in esqintstringcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2537920b8966f9205f5f37e04e5165e06a48e852fe593c32afa766aa4e18e3d3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3423 Malicious code in esqstringpingcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 81cca61a0baab7dba03f486c699fb68b3262202073e99ed34927a17e094d1677 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4593 Malicious code in liburlpywpost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fc02b31c0b86dc0a10f47555e63e9551d3beee7967aeb113c4af2d792b594902 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3362 Malicious code in esqreinfore (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8293efe10f27df0acc54ec9cbc0787d44c76f14933703f142460727f57508b75 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3967 Malicious code in libedencodemine (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 16de049b5727532206c0ad13d34b3786641d2e891a12a07729a1f3652e78e6c5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqgamegrandmc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 20a814115976921535940566feabff918f934dba1dd721c8d4729f7b0da4c0c5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-pushstudyrandom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx cbbd6ba7bf33fcba9bb554c7ea47284eb4a056f9c2057c42539a93f88921b81e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

CVE-2023-26760

CVE-2023-26760 affects Sme.UP ERP TOKYO V6R1M220406. The /debug endpoint exposes an information disclosure vulnerability that allows attackers to access cleartext credentials needed to authenticate to the AS/400 system. This is documented across multiple sources, with impact described as high con...

MAL-2023-6471 Malicious code in selfpostguihttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f52d4f7c43243f0eb7d84335dabadf9d4240cafbd0f98adeb086263ce3360a4f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-stringpingpost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1798675fecb1b20899347f9a69355135079b71926e17c334c6015a37a7140526 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libedramlgtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5cb4973f227b6698929405f42ee7441e6c24a1761746b25b2cbfb125311be35f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...