MAL-2024-12350 Malicious code in springboot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 16d85bf1869194ac1171299e8e0d4e04cbe415bdde4f6eb08730c6018f8958bc Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in szn-zbozi-ab-testing-fulltext (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7df3ea38b323257215fac35c84d508a123246b91b32f77e46c1e9f0c03a74503 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in oaieval (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fd257dee43f966eaacc56e07462eae9170a8a81dc1be6f0df9145f8c3a44de59 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in google-cloud-datacatalog-lineage-producer-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 73ea760146181d2911e0823c121502506892b2e63d3fc20d6281fb2c86e03de8 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in flashinfer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8f37cdcaf6d8e49fa378d094adfdf1b38ea91cd3cf9fc2569db03e514c871a0d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in crunchie (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f26d858f791d6d12aab4d70b3f5494c2b675934ba0b13cffa405ecd0686cfa91 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in springboot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 16d85bf1869194ac1171299e8e0d4e04cbe415bdde4f6eb08730c6018f8958bc Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in szn-rain-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2e592ca324ac2994280852ce647b102f1f47eb9beeb963021b173a3c014cc3a1 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in chunqiuwestj-pkg-westj137 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 03ad250cd789424d92dd1351d15a218d3950be367950c4fc129cf866423a7b8e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in appsec-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c03052298655ba853abe857c8ebbdf21fbb59942800dd2e86aeffbd8ed2751bc Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12250 Malicious code in crunchie (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f26d858f791d6d12aab4d70b3f5494c2b675934ba0b13cffa405ecd0686cfa91 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12311 Malicious code in netsec-monitor (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d53ca1631ad5169910977a710485caa2e85f057cba20a5d29bdcaeccda0cf4f9 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12357 Malicious code in szn-url (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8dbd5099f883c22c11b6c3e27f199e23751f72efa73b3aac476a63ab17dda5dd Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in oe-extract-idss (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2371553e5caae552a4c2fabb7f8d616fde924ba3f292bbc4073715251602efa8 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in dependency-confusion-test-666 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d4daea3fdf20972a88b9946b1251807b3caca0e1634dd53c2be92cf3d1849cd8 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

KLA77114 ACE vulnerability in Microsoft Mariner

Remote code execution vulnerability was found in Microsoft Mariner. Malicious users can exploit this vulnerability to execute arbitrary code, bypass security restrictions. Original advisories CVE-2024-5535 Exploitation Public exploits exist for this vulnerability. Related products CBL-Mariner-2.0...

PYSEC-2024-189

Apache Airflow versions before 2.9.3 have a vulnerability that allows an authenticated attacker to inject a malicious link when installing a provider. Users are recommended to upgrade to version 2.9.3, which fixes this issue...

CVE-2024-3779

Denial of service vulnerability present shortly after product installation or upgrade, potentially allowed an attacker to render ESET’s security product inoperable, provided non-default preconditions were met...

SUSE CVE-2024-40913

In the Linux kernel, the following vulnerability has been resolved: cachefiles: defer exposing anonfd until after copytouser succeeds After installing the anonymous fd, we can now see it in userland and close it. However, at this point we may not have gotten the reference count of the cache, but ...

DEBIAN-CVE-2024-40913

In the Linux kernel, the following vulnerability has been resolved: cachefiles: defer exposing anonfd until after copytouser succeeds After installing the anonymous fd, we can now see it in userland and close it. However, at this point we may not have gotten the reference count of the cache, but ...