EUVD-2022-4868

Malicious code in bioql PyPI...

Hex package manager Code Execution

The vulnerability of the package manager Hex is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading packages from a malicious mirror site...

UBUNTU-CVE-2017-9269

In libzypp before August 2018 GPG keys attached to YUM repositories were not correctly pinned, allowing malicious repository mirrors to silently downgrade to unsigned repositories with potential malicious content...