CVE-2023-22996

In the Linux kernel before 5.17.2, drivers/soc/qcom/qcomaoss.c does not release an offinddevicebynode reference after use, e.g., with putdevice...

Osprey Pump Controller 1.0.1 Unauthenticated Remote Code Execution Exploit

!/usr/bin/env python Osprey Pump Controller 1.0.1 Unauthenticated Remote Code Execution Exploit Vendor: ProPump and Controls, Inc. Product web page: https://www.propumpservice.com | https://www.pumpstationparts.com Affected version: Software Build ID 20211018, Production 10/18/2021 Mirage App:...

CVE-2023-27294

CVE-2023-27294 describes improper neutralization of input during web page generation, allowing an authenticated attacker with access to a restricted account to submit malicious JavaScript as a calendar event description. When other users view that event, the injected script executes in their brow...

CVE-2022-47075

Smart Office Web 20.28 and earlier versions are affected by CVE-2022-47075 and CVE-2022-47076, both resulting in information disclosure. The impact is unauthenticated data exposure via insecure endpoints: ExportEmployeeDetails.aspx (action parameter) and ExportReportingManager.aspx for CVE-2022-4...

Osprey Pump Controller 1.0.1 Unauthenticated File Disclosure Vulnerability

Osprey Pump Controller version 1.0.1 suffers from an unauthenticated file disclosure vulnerability. Osprey Pump Controller 1.0.1 Unauthenticated File Disclosure Vendor: ProPump and Controls, Inc. Product web page: https://www.propumpservice.com | https://www.pumpstationparts.com Affected version:...

MAL-2023-4026 Malicious code in libgrandrammc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c782fdca435b4731b1e9e66b986fa64de581cdc3de8b4d249fff5b02de599634 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3931 Malicious code in libcpupywmine (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8a44df35cd5978b7af169073d6de14e0df95ad412ba1d9164954f57daa95d7be EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4030 Malicious code in libgrandverultra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 81699c7e6d322611a0fafca330b570ea034aeb2b381511be59489f2d126ae8d9 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5294 Malicious code in py-libpipintel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3c117ce23272471a0aa34e72ab1fb1ac7ed58e96aa3ab6c39b36ca0a772fd425 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5742 Malicious code in py-verstrosint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 68114238a89bf434d214823a4e02553b3c692153a704fdeb790b6618677225ec EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4065 Malicious code in libhackedstrreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a2c0508c71a29915df4f7d6e73bdc976175b9afdb648f21569ae2e4b7d20dfcb EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7679 Malicious code in tpultravmvirtual (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx dce09e569f8d2f375a9be26a4fbd93558d8d868ccde5e7802f6a8f362cf8d0c8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7695 Malicious code in tpverencodeinfo (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 890da7cb947135b9c2c3b9700f6c23d2c0ec1f40f0b8e9c55edfd5844fae9f18 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7369 Malicious code in tppippushvm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d1cf31dc55405bcae61528f7f58f56500fa6aea81aa243c8b62bb71135e5f276 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3143 Malicious code in esqnvidiaultrapep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 57181c21a9e27305d91f14308556c31ed77b4297fa152176d6e9b15727961478 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5349 Malicious code in py-minemaskget (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4ce4f410ab6bbdec8e653634bbab47ca30e1905f3f10479579510035545c15d4 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5745 Malicious code in py-virtualcontrolgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx df7e5e9e3e79be3638fca29bbb61718bcdd5cb5d49b9be0e0888fa5df3f36f0e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3083 Malicious code in esqmaskintlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx aa314eb61a9f4708081b3127e3c33f6bac286f5adc5c5f306b1e2192c9018c8b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7494 Malicious code in tppywrandompull (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b120b78c1290f1027967614cb6e192a67e80977e1199b7e34dccdc6e28012155 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4602 Malicious code in libvercpuvm (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e500cae9476ae68290959f068764eb6f1ea5f1c4dacabcc09b5c37666bbcec9e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...