352 matches found
PT-2024-15653 · Wic1200 · Wic1200
Name of the Vulnerable Software and Affected Versions: WIC1200 version 1.1 Description: A Cross-site scripting XSS vulnerability has been found, allowing an authenticated user to store a malicious javascript payload in the device model parameter via "/setup/diags ir learn.asp". This enables the...
Xantech WIC1200 Cross-Site Scripting Vulnerability
The Xantech WIC1200 is a Web Intelligent Controller from Xantech. A cross-site scripting vulnerability exists in the Xantech WIC1200 version 1.1, which originates from the fact that an authenticated user can store a malicious JavaScript load in the device model parameter via...
PT-2023-8521 · WordPress · Learndash Lms
Name of the Vulnerable Software and Affected Versions: LearnDash LMS plugin for WordPress versions up to, and including, 4.10.1 Description: The issue is related to Sensitive Information Exposure, which can be exploited via API, allowing unauthenticated attackers to obtain access to quizzes. The...
learnrussianineu.com Cross Site Scripting vulnerability OBB-3779094
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in scikit-learn
Summary IBM Watson Discovery for IBM Cloud Pak for Data contains a vulnerable version of scikit-learn. Vulnerability Details CVEID:CVE-2020-28975 DESCRIPTION: scikit-learn is vulnerable to a denial of service, caused by an error in svmpredictvalues in svm.cpp in Libsvm. By using a specially-craft...
how-to-learn-any-language.com Open Redirect vulnerability OBB-3585846
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
medi-learn-kurse.de Cross Site Scripting vulnerability OBB-3483886
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress plugin Uncanny Toolkit for LearnDash 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site request forgery vulnerability...
Malicious code in scikit-learn-matplotlib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14d5e86444b47f8ee729dcf7930f4ba68d938ea99b786e110e5d7bd53f081fa9 The OpenSSF Package Analysis project identified 'scikit-learn-matplotlib' @ 6.12.17 pypi as malicious. It is considered malicious because: - The...
MAL-2023-1405 Malicious code in scikit-learn-matplotlib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 14d5e86444b47f8ee729dcf7930f4ba68d938ea99b786e110e5d7bd53f081fa9 The OpenSSF Package Analysis project identified 'scikit-learn-matplotlib' @ 6.12.17 pypi as malicious. It is considered malicious because: - The...
Malicious code in beautifulsoup-scikit-learn (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6e35a9499d5b3efd34a3813328043f5f0132eef5cacc23f14dbaa2ba4e06ce43 The OpenSSF Package Analysis project identified 'beautifulsoup-scikit-learn' @ 2.4.9 pypi as malicious. It is considered malicious because: - Th...
Malicious code in sys-scikit-learn (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a43a0e5d5c9f583954d954b1a27badf0220728b50a05983479b1e2e212e8c16e The OpenSSF Package Analysis project identified 'sys-scikit-learn' @ 17.8.18 pypi as malicious. It is considered malicious because: - The packag...
SUSE CVE-2020-13092
scikit-learn aka sklearn through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load function, if reduce makes an os.system call. NOTE: third parties dispute this issue because the joblib.load function is documented as unsafe and it is the user's...
SUSE CVE-2020-28975
svmpredictvalues in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service segmentation fault via a crafted model SVM introduced via pickle, json, or any other model permanence standard with a large value in the nsupport array. NOT...
MAL-2023-2218 Malicious code in scikit-lern (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7f251a0fde1f6bcc1fa1290b60c6c09ee739c1ed8de2be91fd77f3280f3a0556 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
Malicious code in scikitt-learn (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx c8573809cd0b77e4e2c4f4dea60c0323389487920e896d00dbdd84ea88be71d5 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
Malicious code in scikkit-learn (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx b492538de98d6ee998d8fd91f4f7308eb144fa6ffb4f0abe103ee389d6d7e42a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-2211 Malicious code in scikit-lean (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1c90858b7d34c77b6f3a49a7c871896ca20ac72c3e300e124da8f03ccc271fe4 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-2220 Malicious code in scikitt-learn (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx c8573809cd0b77e4e2c4f4dea60c0323389487920e896d00dbdd84ea88be71d5 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
Malicious code in scikt-learn (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1e9bef88276a424a966a4c39baf6f4fa094eb263ed757a8082a71a36d4860b5e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...