Linux Distros Unpatched Vulnerability : CVE-2020-27372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow vulnerability exists in Brandy Basic V Interpreter 1.21 in the runinterpreter function. CVE-2020-27372 Note that Nessus relies on the presence...

PHP Pointer Arithmetic DoS

The vulnerability of the PHP programming language interpreter is related to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Exploit for CVE-2024-28397

CodeTwoRCEExploit This script incorporates authentication to a...

Perl Interpreter Unreliable Search Path

The vulnerability of the Perl programming language interpreter is related to the use of an unreliable search path. Exploiting this vulnerability allows an attacker to execute arbitrary code or gain unauthorized access to protected information...

GHSA-J343-8V2J-FF7W Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcommand

Summary Using idlelib.pyshell.ModifiedInterpreter.runcommand function, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to...

Picklescan has a missing detection when calling built-in python code.InteractiveInterpreter

Summary Using code.InteractiveInterpreter.runcode, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to code.InteractiveInterpreter.runcode function in reduce meth...

GHSA-CJ3C-V495-4XQH Picklescan has a missing detection when calling built-in python code.InteractiveInterpreter

Summary Using code.InteractiveInterpreter.runcode, which is a built-in python library function to execute remote pickle file. Details The attack payload executes in the following steps: First, the attacker craft the payload by calling to code.InteractiveInterpreter.runcode function in reduce meth...

[SECURITY] Fedora 41 Update: python3-docs-3.13.7-1.fc41

The python3-docs package contains documentation on the Python 3 programming language and interpreter...

PT-2026-54011

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.29 Description The software fails to detect malicious pickle files that utilize the code.InteractiveInterpreter.runcode function within reduce methods. This allows attackers to craft pickle payloads that bypass...

PT-2026-52617

Name of the Vulnerable Software and Affected Versions picklescan versions prior to 0.0.30 Description The software fails to detect malicious pickle files that invoke idlelib.pyshell.ModifiedInterpreter.runcode within reduce methods. This allows attackers to embed undetected code in pickle files...

wamr:wamr_fuzz_classic_interp: Heap-buffer-overflow in wasm_loader_prepare_bytecode

Project: https://github.com/bytecodealliance/wasm-micro-runtime.git Detailed Report: https://oss-fuzz.com/testcase?key=4624226721267712 Project: wamr Fuzzing Engine: libFuzzer Fuzz Target: wamrfuzzclassicinterp Job Type: libfuzzerasanwamr Platform Id: linux Crash Type: Heap-buffer-overflow READ 2...

ROS-20250822-23

A vulnerability in the PHP programming language interpreter is related to insufficient null byte checking in the implementation of the fsockopen function when handling hostnames. Exploitation of the vulnerability could allow an attacker acting remotely to perform SSRF attacks A vulnerability in t...

CPython Path Traversal

The vulnerability of the CPython interpreter is related to incorrect restrictions on path names to restricted directories. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...

CVE-2025-8672

MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application...

[SECURITY] Fedora 42 Update: python3-docs-3.13.6-1.fc42

The python3-docs package contains documentation on the Python 3 programming language and interpreter...

ROS-20250813-01

A vulnerability in the tarfile module of the Python programming language interpreter CPython is associated with incorrect parsing of the file header. Exploitation of the vulnerability could allow an attacker, acting remotely, to cause a denial of service...

CVE-2025-8672

MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application...

CVE-2025-8672 TCC Bypass via Inherited Permissions in Bundled Interpreter in GIMP.app

MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application...

CVE-2025-8672

The CVE describes a TCC bypass in macOS GIMP where a bundled Python interpreter inherits the user’s TCC permissions granted to GIMP. With local access, an attacker can invoke this interpreter to run arbitrary commands and access files in privacy-protected folders without prompting the user, abusi...

CVE-2025-8672

MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control TCC permissions granted by the user to the main application bundle. An attacker with local user access can invoke this interpreter with arbitrary commands or scripts, leveraging the application...