22 matches found
dask-cuda (>=23.8.0a230803, <=23.10.0a230822), dask-sql (2023.8.0) +2 more potentially affected by CVE-2026-23528 via distributed (2023.7.1)
distributed PYPI version 2023.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =23.8.0a230803, =0.7.0, =3.2.2, =3.5.6 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...
dedl-stack-client (>=2024.4.1, <=2025.5.1), nima (>=0.7.2, <=0.7.3) potentially affected by CVE-2026-23528 via distributed (2023.8.0)
distributed PYPI version 2023.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dedl-stack-client =2024.4.1, =0.7.2, =0.7.3 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...
hgdl (>=2.1.6, <=2.1.7), nima (0.10.0) potentially affected by CVE-2026-23528 via distributed (2024.5.0)
distributed PYPI version 2024.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - hgdl =2.1.6, =2.1.7 - nima 0.10.0 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...
hgdl (>=2.1.6, <=2.1.7), nima (0.10.0) potentially affected by CVE-2026-23528 via distributed (2024.5.0)
distributed PYPI version 2024.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - hgdl =2.1.6, =2.1.7 - nima 0.10.0 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...
dask-cuda (>=23.8.0a230803, <=23.10.0a230822), dask-sql (2023.8.0) +2 more potentially affected by CVE-2026-23528 via distributed (2023.7.1)
distributed PYPI version 2023.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =23.8.0a230803, =0.7.0, =3.2.2, =3.5.6 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...
dedl-stack-client (>=2024.4.1, <=2025.5.1), nima (>=0.7.2, <=0.7.3) potentially affected by CVE-2026-23528 via distributed (2023.8.0)
distributed PYPI version 2023.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dedl-stack-client =2024.4.1, =0.7.2, =0.7.3 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...
dask-cuda (>=23.10.0a230929, <=23.12.0a231027), nima (0.7.4) potentially affected by CVE-2026-23528 via distributed (2023.9.2)
distributed PYPI version 2023.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =23.10.0a230929, =23.12.0a231027 - nima 0.7.4 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...
dask-cuda (>=23.12.0a27, <=24.2.0a6), dask-sql (2023.11.0) +3 more potentially affected by CVE-2026-23528 via distributed (2023.11.0)
distributed PYPI version 2023.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-cuda =23.12.0a27, =1.0.0, =23.12.0a5, =23.12.1 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...
nima (>=0.9.0, <=0.9.1) potentially affected by CVE-2026-23528 via distributed (2024.3.1)
distributed PYPI version 2024.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - nima =0.9.0, =0.9.1 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...
EUVD-2023-52803
Malicious code in bioql PyPI...
com.intuit.graphql:graphql-orchestrator-java (>=5.0.23, <=5.0.29), io.helidon.graphql:helidon-graphql-server (>=2.6.1, <=4.0.0-alpha6) +3 more potentially affected by CVE-2024-40094 via com.graphql-java:graphql-java (17.5)
com.graphql-java:graphql-java MAVEN version 17.5 is affected by a known vulnerability. The following packages have a transitive dependency on com.graphql-java:graphql-java and may be impacted: - com.intuit.graphql:graphql-orchestrator-java =5.0.23, =2.6.1, =2.6.1, =4.0.0-alpha6 -...
CVE-2023-48770
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nima Saberi Aparat allows Stored XSS.This issue affects Aparat: from n/a through 1.7.1...
Cross site scripting
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nima Saberi Aparat allows Stored XSS.This issue affects Aparat: from n/a through 1.7.1...
CVE-2023-48770 WordPress Aparat Plugin <= 1.7.1 is vulnerable to Cross Site Scripting (XSS)
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nima Saberi Aparat allows Stored XSS.This issue affects Aparat: from n/a through 1.7.1...
CVE-2023-48770
CVE-2023-48770 is a Stored XSS vulnerability in the WordPress Aparat plugin, affecting Aparat versions up to 1.7.1. The connected sources confirm the issue and affected version(s); no explicit public patch/version fix is provided in the supplied documents. Remediation is not described here.
CVE-2023-48770: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Nima Saberi Aparat allows Stored XSS.This issue affects Aparat: from n/a through 1.7.1...
17-Year-Old 'Mastermind', 2 Others Behind the Biggest Twitter Hack Arrested
A 17-year-old teen and two other 19 and 22-year-old individuals have reportedly been arrested for being the alleged mastermind behind the recent Twitter hack that simultaneously targeted several high-profile accounts within minutes as part of a massive bitcoin scam. According to the U.S. Departme...
US releases Iranian Hacker as part of Prisoner Exchange Program
The United States has freed 4 Iranian nationals including one Hacker and reduced the sentences of 3 others in exchange for the release of 5 Americans formerly held by Iran as part of a prisoner swap or Prisoner Exchange Program. The Iranian citizens released from the United States custody through...
MailEnable Mail Server IMAP <= 1.52 Remote Buffer Overflow Exploit
No description provided by source. / MailEnable , IMAP Service, Remote Buffer Overflow Exploit v0.4 Homepage : www.mailenable.com Affected versions: Pro v1.52 Enterprise v1.01 Bug discovery : Nima Majidi at www.hat-squad.com...
phpBB PlusXL <= 2.0_272 (constants.php) Remote File Include Exploit
No description provided by source. !/usr/bin/perl phpBB PlusXL 2.X biuld 272 Class: Remote File Include Vulnerability Patch: unavailable Date: 2006/10/12 Remote: Yes Type: high...