1907 matches found
EUVD-2024-22305
Malicious code in bioql PyPI...
EUVD-2023-43197
Malicious code in bioql PyPI...
EUVD-2022-2345
Malicious code in bioql PyPI...
EUVD-2021-30952
Malicious code in bioql PyPI...
EUVD-2022-40893
Malicious code in bioql PyPI...
Malicious code in gtts-lts (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7cfb789704a149f7b741d0c68fcb8a32a1e189444ca36f97e435e59d04e073b8 During the execution, the package silently download and runs a JAR not related to the package job. At the time of analysis, the content was corrupted ---...
MAL-2025-191745 Malicious code in gtts-lts (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7cfb789704a149f7b741d0c68fcb8a32a1e189444ca36f97e435e59d04e073b8 During the execution, the package silently download and runs a JAR not related to the package job. At the time of analysis, the content was corrupted ---...
Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
log4j-finder A Python3 script to scan the filesystem to find Log4j2 that is vulnerable to Log4Shell CVE-2021-44228 & CVE-2021-45046 & CVE-2021-45105. It scans recursively both on disk and inside nested Java Archive files JARs. How it works log4j-finder identifies log4j2 libraries on your filesyst...
Versions of the package tough-cookie before 4.1.3 are vulnerable to Prototype Pollution due to improper handling of Cookies when using CookieJar in rejectPublicSuffixes=false mode. This issue arises from the manner in which the objects are initialized.
...
When a secure cookie existed in the Firefox cookie jar an insecure cookie for the same domain could have been created, when it should have silently failed. This could have led to a desynchronization in expected results when reading from the secure cookie. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112.
...
Linux Distros Unpatched Vulnerability : CVE-2024-53990
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AsyncHttpClient AHC library allows Java applications to easily execute HTTP requests and asynchronously process HTTP responses. When making any HTTP request...
Linux Distros Unpatched Vulnerability : CVE-2024-38807
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Applications that use spring-boot-loader or spring-boot-loader-classic and contain custom code that performs signature verification of nested jar files may be...
Linux Distros Unpatched Vulnerability : CVE-2019-16943
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled either globally or for a specific...
Linux Distros Unpatched Vulnerability : CVE-2018-12022
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in FasterXML jackson-databind prior to 2.7.9.4, 2.8.11.2, and 2.9.6. When Default Typing is enabled either globally or for a specific...
Linux Distros Unpatched Vulnerability : CVE-2022-4065
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in cbeust testng 7.5.0/7.6.0/7.6.1/7.7.0. It has been declared as critical. Affected by this vulnerability is the function...
Linux Distros Unpatched Vulnerability : CVE-2023-29538
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Under specific circumstances a WebExtension may have received a jar:file:/// URI instead of a moz-extension:/// URI during a load request. This leaked directory...
SAP NetWeaver Application Server JAR Detection
Binary data sapnwlocaldetection.nbin...
📄 Schneider Electric EcoStruxure IT Data Center Expert 8.3 Root Password Discovery
Schneider Electric EcoStruxure IT Data Center Expert versions 8.3 and below use logic contained within a JAR file and the MAC address to compute a "random" password for the root account. With access to the JAR file and knowledge of the MAC address, it is possible to determine the root password...
Malicious code in json-cookie-jar (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41f728e1c9ab68496a0fe986aed6d7eeb7a4ed694379b812a032240c95e2e39b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-5563 Malicious code in json-cookie-jar (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 41f728e1c9ab68496a0fe986aed6d7eeb7a4ed694379b812a032240c95e2e39b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...