Malicious code in tdata-grabber (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b4c3b37df5e3d08d7bc6ad736e0231ed0dc655640ffdf0dc403f4029ace2787 Package name explicitly declares its purpose as harvesting Telegram Desktop session data tdata directory. The tdata folder contains live authenticate...

MINI-R65P-6H58-4VH6

Bulletin has no description...

WebOb: Location header normalization during redirect leads to open redirect

...

MINI-HVFG-WVFJ-6G84

Bulletin has no description...

MINI-H6FF-R94Q-GX85

Bulletin has no description...

MINI-JR43-33PM-CWJ9

Bulletin has no description...

MINI-372W-P468-67MX

Bulletin has no description...

MINI-C5CG-HHC7-F4QM

Bulletin has no description...

ECHO-F07E-8DF7-39F4

Bulletin has no description...

CVE-2026-44889

A flaw was found in WebOb, a library for HTTP requests and responses. A remote attacker could exploit this vulnerability by influencing the HTTP Location header during a redirect. Due to improper normalization of the Location header, specifically how certain ASCII characters are handled, an...

CVE-2026-53018

A flaw was found in the Linux kernel's f2fs filesystem. During garbage collection, a race condition can occur when a page is moved and updated, but the system attempts to read it again from an outdated location. This can trigger a kernel bug, leading to a system crash and a denial of service DoS....

MINI-X97C-5XGP-QWW8

Bulletin has no description...

CGA-4QR5-C8QC-3FFP

Bulletin has no description...

ECHO-2EA7-D2C8-D549

Bulletin has no description...

MINI-V3H6-CHVC-9P92

Bulletin has no description...

CVE-2026-8690

The CVE describes an authorization bypass in the RentMy Real-Time Rental Management Plugin for WordPress, affecting all versions up to 4.0.4.1. The root cause is improper verification of a user’s authorization to perform actions, enabling unauthenticated attackers to read, create, update, and del...

PT-2026-51685

Name of the Vulnerable Software and Affected Versions RentMy Real-Time Rental Management Plugin versions prior to 4.0.4.2 Description An authorization bypass exists because the plugin fails to properly verify if a user is authorized to perform specific actions. This allows unauthenticated attacke...

Linux Distros Unpatched Vulnerability : CVE-2026-44889

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WebOb provides objects for HTTP requests and responses. Prior to 1.8.10, the normalization of the HTTP Location header during a redirect is vulnerable to an ope...

MINI-JG77-RV3F-FJ9J

Bulletin has no description...

MINI-C3H9-5JRJ-JJWQ

Bulletin has no description...