Improperly Controlled Modification of Dynamically-Determined Object Attributes

Overview ormar is an An async ORM with fastapi in mind and pydantic validation. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes via the model constructor when injecting the pkonly or excluded parameters when used...

PT-2026-26342

Name of the Vulnerable Software and Affected Versions ormar versions 0.23.0 and below Description ormar, an async mini ORM for Python, has a Pydantic validation bypass issue in its model constructor. This allows unauthenticated users to skip all field validation by injecting " pk only ": true int...

CVE-2024-34416

Unrestricted Upload of File with Dangerous Type vulnerability in Pk Favicon Manager.This issue affects Pk Favicon Manager: from n/a through 2.1...

EUVD-2025-144750

Malicious code in apasih-leda-pk npm...

EUVD-2012-4439

Malware in sbrugna...

EUVD-2024-34777

Malicious code in bioql PyPI...

MAL-2025-13718 Malicious code in @zalastax/nolb-react-pk (npm)

The package @zalastax/nolb-react-pk was found to contain malicious code...

Malicious code in @zalastax/nolb-react-pk (npm)

The package @zalastax/nolb-react-pk was found to contain malicious code...

Malicious code in @zalastax/nolb-pk (npm)

The package @zalastax/nolb-pk was found to contain malicious code...

MAL-2025-13198 Malicious code in @zalastax/nolb-pk (npm)

The package @zalastax/nolb-pk was found to contain malicious code...

MAL-2025-11011 Malicious code in @zalastax/nolb-cordova-pk (npm)

The package @zalastax/nolb-cordova-pk was found to contain malicious code...

The vulnerabilities of the functions mbedtls_pem_read_buffer() and mbedtls_pk_parse() in the Mbed TLS software allow a attacker to cause a service failure or disclose protected information.

The vulnerability of the mbedtlspemreadbuffer and mbedtlspkparse functions in Mbed TLS is related to an off-by-one error. Exploiting this vulnerability can allow a remote attacker to cause service failures or expose protected information...

Malicious code in telegram-pk-auto-sender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0440cb1173d59d4994a01cb91522080aef6f9ce7987bcf54f32ebf0ae8a3581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5961 Malicious code in telegram-pk-auto-sender (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c0440cb1173d59d4994a01cb91522080aef6f9ce7987bcf54f32ebf0ae8a3581 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

UBUNTU-CVE-2025-52497

Mbed TLS before 3.6.4 has a PEM parsing one-byte heap-based buffer underflow, in mbedtlspemreadbuffer and two mbedtlspkparse functions, via untrusted PEM input...

Linux Distros Unpatched Vulnerability : CVE-2012-4510

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - cups-pk-helper before 0.2.3 does not properly wrap the 1 cupsGetFile and 2 cupsPutFile function calls, which allows user-assisted remote attackers to read or...

CVE-2024-8105

A vulnerability exists in UEFI implementations that use a hard-coded software-based Platform Key PK. An attacker in possession of the corresponding PK private key can sign arbitrary UEFI executables or firmware components, causing them to be trusted by affected systems and potentially bypassing...

CVE-2024-8105

CVE-2024-8105 describes PKfail, a vulnerability where a compromised private Platform Key (PK) can sign malicious UEFI modules, allowing code execution at boot and potential bypass of Secure Boot. Public documents confirm the root cause is insecure PK usage in UEFI signatures, enabling attackers t...

OPENSUSE-SU-2024:10212-1 cups-pk-helper-0.2.6-1.5 on GA media

These are all security issues fixed in the cups-pk-helper-0.2.6-1.5 package on the GA media of openSUSE Tumbleweed...

RHEL 6 : cups-pk-helper (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - cups-pk-helper: Insecure wrapping of cupsGetFile and cupsPutFile methods CVE-2012-4510 Note that Nessus has not...