21 matches found
Malicious code in loadurl (PyPI)
Source: checkmarx 07a7de66a6f12492bfd80b1ccc245055129a97ccd5096f9a9f0c8e38d1e9bde2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware --- Credit: OpenSSF source...
EUVD-2022-7060
Malicious code in bioql PyPI...
EUVD-2025-28436
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2020-25614
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at...
CVE-2025-5247
A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to th...
CVE-2025-5247 Gowabby HFish url.go LoadUrl improper authentication
A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to th...
CVE-2025-5247 Gowabby HFish url.go LoadUrl improper authentication
A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to th...
CVE-2025-5247: Improper Authentication
A vulnerability, which was classified as critical, has been found in Gowabby HFish 0.1. This issue affects the function LoadUrl of the file \view\url.go. The manipulation of the argument r leads to improper authentication. The attack may be initiated remotely. The exploit has been disclosed to th...
PT-2025-23007 · Unknown · Gowabby Hfish
Name of the Vulnerable Software and Affected Versions: Gowabby HFish version 0.1 Description: A critical issue has been found in Gowabby HFish, affecting the LoadUrl function of the file viewurl.go. The manipulation of the argument r leads to improper authentication. This issue can be exploited...
HFish Authorization Issue Vulnerability
HFish is a community-based free honeypot by Zachary Individual Developer. An authorization issue vulnerability exists in HFish version 0.1, which stems from improper authentication of parameter r by function LoadUrl in file viewurl.go...
MAL-2023-4696 Malicious code in loadurl (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 07a7de66a6f12492bfd80b1ccc245055129a97ccd5096f9a9f0c8e38d1e9bde2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
GHSA-93M7-C69F-5CFJ xmlquery lacks check for whether LoadURL response is in XML format, causing denial of service
xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...
DEBIAN-CVE-2020-25614
xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...
UBUNTU-CVE-2020-25614
xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...
Format string
xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...
CVE-2020-25614
xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...
CVE-2020-25614
xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...
Improper Input Validation
xmlquery lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...
CVE-2020-25614: Improper Input Validation
xmlquery before 1.3.1 lacks a check for whether a LoadURL response is in the XML format, which allows attackers to cause a denial of service SIGSEGV at xmlquery.Node.InnerText or possibly have unspecified other impact...
PT-2020-16128 · Xmlquery · Xmlquery
Name of the Vulnerable Software and Affected Versions: xmlquery versions prior to 1.3.1 Description: The issue allows attackers to cause a denial of service SIGSEGV or possibly have other unspecified impacts due to the lack of a check for whether a LoadURL response is in the XML format. This can...