14 matches found
EUVD-2005-3008
Malware in sbrugna...
EUVD-2022-5556
Malicious code in bioql PyPI...
GHSA-WCPC-F63G-X26Q Py2Play Unpickles Untrusted Objects
Py2Play allows remote attackers to execute arbitrary Python code via pickled objects, which Py2Play unpickles and executes...
Py2Play Unpickles Untrusted Objects
Py2Play allows remote attackers to execute arbitrary Python code via pickled objects, which Py2Play unpickles and executes...
PYSEC-2007-4
Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the 1 statusmessages or 2 linkintegrity module, which the module unpickles and executes...
Code injection
Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the 1 statusmessages or 2 linkintegrity module, which the module unpickles and executes...
CVE-2007-5741
Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the 1 statusmessages or 2 linkintegrity module, which the module unpickles and executes...
CVE-2007-5741
Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the 1 statusmessages or 2 linkintegrity module, which the module unpickles and executes...
CVE-2005-3008
Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and executes...
CVE-2005-3008
Tofu 0.2 allows remote attackers to execute arbitrary Python code via crafted pickled objects, which Tofu unpickles and executes...
CVE-2005-3008
CVE-2005-3008 affects Tofu 0.2, where remote attackers can cause arbitrary Python code execution by sending crafted pickled objects that Tofu unpickles and executes. Root cause is untrusted unpickling of serialized data. The provided documents describe the vulnerability and its impact as remote c...
CVE-2005-2875
Py2Play allows remote attackers to execute arbitrary Python code via pickled objects, which Py2Play unpickles and executes...
CVE-2005-2875
Py2Play allows remote attackers to execute arbitrary Python code via pickled objects, which Py2Play unpickles and executes...
CVE-2005-2875
CVE-2005-2875 affects Py2Play, where remote untrusted pickled objects can be unpicked and executed, enabling arbitrary code execution. Multiple sources (Debian DSA-856-1, GLSA 200509-09, Gentoo/OpenVAS advisories, and the GHSA entry) describe py2play as a remote-execution risk via untrusted data ...