Lucene search
+L

17 matches found

Kitploit
Kitploit
•added 2026/09/25 11:23 a.m.•190 views

sn0int

sn0int sn0int pronounced /snoɪnt/ is a semi-automatic OSINT framework and package manager. It's used by IT security professionals, bug bounty hunters, law enforcement agencies and in security awareness trainings to gather intelligence about a given target or about yourself. sn0int is enumerating...

5.7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/05/12 7:43 a.m.•24 views

Malicious code in crazehub (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 53d37c0e75f63e9da7adcc1f71f8b67a665d080342df6857a15dadc297e4f075 crazehub/init.py performs multiple user-hostile actions at import time. Lines 2-3 unconditionally run os.system"pip install phonenumbers" and...

6AI score
SaveExploits0References1
Veracode
Veracode
•added 2025/11/13 7:36 a.m.•9 views

Improper Input Validation

github.com/nyaruka/phonenumbers is vulnerable to Improper Input Validation. The vulnerability is due to insufficient validation of syntactic correctness in the phonenumbers.Parse function, which allows an attacker to provide crafted input and cause a panic resulting in a “runtime error: slice...

7.5CVSS6.9AI score0.00455EPSS
SaveExploits1References3Affected Software1
SUSE CVE
SUSE CVE
•added 2025/11/09 12:37 a.m.•10 views

SUSE CVE-2025-10954

Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse function. An attacker can cause a panic by providing crafted input causing a "runtime error: slice bounds out of range"...

7.5CVSS6.9AI score0.00455EPSS
SaveExploits1References2
OSV
OSV
•added 2025/11/05 6:41 p.m.•8 views

GO-2025-3987 Vulnerable to Improper Validation of Syntactic Correctness of Input in github.com/nyaruka/phonenumbers

Vulnerable to Improper Validation of Syntactic Correctness of Input in github.com/nyaruka/phonenumbers...

7.5CVSS6.9AI score0.00455EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-31408

Malicious code in bioql PyPI...

7.5CVSS6.3AI score0.00455EPSS
SaveExploits1References4
RedhatCVE
RedhatCVE
•added 2025/09/29 4:58 p.m.•7 views

CVE-2025-10954

Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse function. An attacker can cause a panic by providing crafted input causing a "runtime error: slice bounds out of range". Mitigatio...

6.9CVSS6.4AI score0.00455EPSS
SaveExploits1References2
OSV
OSV
•added 2025/09/27 6:30 a.m.•16 views

GHSA-FMJH-F678-CV3X github.com/nyaruka/phonenumbers Vulnerable to Improper Validation of Syntactic Correctness of Input

Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse function. An attacker can cause a panic by providing crafted input causing a "runtime error: slice bounds out of range"...

6.9CVSS6.9AI score0.00455EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2025/09/27 6:30 a.m.•32 views

github.com/nyaruka/phonenumbers Vulnerable to Improper Validation of Syntactic Correctness of Input

Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse function. An attacker can cause a panic by providing crafted input causing a "runtime error: slice bounds out of range"...

7.5CVSS6.9AI score0.00455EPSS
SaveExploits1References5Affected Software1
NVD
NVD
•added 2025/09/27 5:15 a.m.•14 views

CVE-2025-10954

Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse function. An attacker can cause a panic by providing crafted input causing a "runtime error: slice bounds out of range"...

7.5CVSS0.00455EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2025/09/27 5:00 a.m.•31 views

CVE-2025-10954

Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse function. An attacker can cause a panic by providing crafted input causing a "runtime error: slice bounds out of range"...

6.9CVSS0.00455EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2025/09/27 5:00 a.m.•5 views

CVE-2025-10954

Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse function. An attacker can cause a panic by providing crafted input causing a "runtime error: slice bounds out of range"...

6.9CVSS6.5AI score0.00455EPSS
SaveExploits1References3
CVE
CVE
•added 2025/09/27 5:00 a.m.•35 views

CVE-2025-10954

The CVE-2025-10954 entry concerns the Go package github.com/nyaruka/phonenumbers prior to version 1.2.2, where the phonenumbers.Parse() function may panic due to improper validation of input syntax, causing a runtime slice bounds error. Affected component: phonenumbers.Parse() in the library; roo...

7.5CVSS6.5AI score0.00455EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2025/09/27 5:00 a.m.•8 views

CVE-2025-10954

Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse function. An attacker can cause a panic by providing crafted input causing a "runtime error: slice bounds out of range"...

6.9CVSS6.9AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/09/27 12:00 a.m.•11 views

PT-2025-39710

Name of the Vulnerable Software and Affected Versions github.com/nyaruka/phonenumbers versions prior to 1.2.2 Description The package contains an issue related to improper validation of input syntax within the phonenumbers.Parse function. Providing specifically crafted input can lead to a panic,...

7.5CVSS7.6AI score0.00455EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/27 12:00 a.m.•0 views

CVE-2025-10954: Improper Validation of Syntactic Correctness of Input

Versions of the package github.com/nyaruka/phonenumbers before 1.2.2 are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse function. An attacker can cause a panic by providing crafted input causing a "runtime error: slice bounds out of range"...

7.5CVSS5.8AI score0.00455EPSS
SaveExploits1References1
Snyk
Snyk
•added 2023/11/23 10:00 p.m.•3 views

Improper Validation of Syntactic Correctness of Input

Overview Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the phonenumbers.Parse function. An attacker can cause a panic by providing crafted input causing a "runtime error: slice bounds out of range". PoC go import "fmt"...

7.5CVSS7.1AI score0.00455EPSS
SaveExploits1References2
Rows per page
Query Builder