69 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-31976
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libming v0.4.8 was discovered to contain a stack buffer overflow via the function makeswfpreprocess at /util/makeswfutils.c. CVE-2023-31976 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2021-26929
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An XSS issue was discovered in Horde Groupware Webmail Edition through 5.2.22 where the HordeTextFilter library before 2.3.7 is used. The attacker can send a...
Regular Expression Denial of Service (ReDoS)
Overview transformers is a State-of-the-art Machine Learning for JAX, PyTorch and TensorFlow Affected versions of this package are vulnerable to Regular Expression Denial of Service ReDoS via the preprocessstring function in the transformers.testingutils module. An attacker can cause high CPU usa...
PYSEC-2025-40
A vulnerability in the preprocessstring function of the transformers.testingutils module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service ReDoS attack. The regular expression used to process code blocks in docstrings contains nested quantifiers, leadin...
PT-2025-21933 · Hugging Face · Transformers
Name of the Vulnerable Software and Affected Versions: huggingface/transformers version v4.48.3 Description: A vulnerability in the preprocess string function of the transformers.testing utils module allows for a Regular Expression Denial of Service ReDoS attack. The regular expression used to...
transformers 安全漏洞
transformers is a Hugging Face open source application for machine learning. A security vulnerability exists in transformers version v4.48.3, which stems from improper handling of regular expressions in the preprocessstring function and could lead to a regular expression denial of service attack...
MAL-2024-10649 Malicious code in keras-preprocess (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c153be1503b6ad6b4b2a00de177c76a28d50f4612220edb1dcebf6ac85812ba2 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
Malicious code in keras-preprocess (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 c153be1503b6ad6b4b2a00de177c76a28d50f4612220edb1dcebf6ac85812ba2 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
MAL-2024-10647 Malicious code in kera-preprocess (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6eb322e12f02f6acf94ad19bc2b1c261a2753e3bc4dd74a82a63e31d73e5d9bd A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
Malicious code in kera-preprocess (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6eb322e12f02f6acf94ad19bc2b1c261a2753e3bc4dd74a82a63e31d73e5d9bd A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...
ffcss Security Vulnerabilities
ffcss is a CLI interface for applying and configuring Firefox CSS themes. A security vulnerability exists in versions prior to ffcss 0.2.0, which stems from a vulnerability that allows an attacker to introduce all characters of a regular expression by bypassing the limitations of the...
PT-2023-31913 · Ffcss · Ffcss
Name of the Vulnerable Software and Affected Versions: ffcss versions prior to 0.2.0 Description: The issue concerns a Late-Unicode normalization vulnerability in the lookupPreprocess function, which is used to search for themes loosely by ignoring certain characters. Due to the use of late Unico...
libming 缓冲区错误漏洞
libming is a Flash SWF output library written in C. It can be used as a library for Flash SWF output, but it can also be used for Flash SWF output. A security vulnerability exists in libming version v0.4.8, which originates from the function makeswfpreprocess in /util/makeswfutils.c containing a...
PT-2023-23550 · Libming · Libming
Name of the Vulnerable Software and Affected Versions: libming version 0.4.8 Description: The issue is a stack buffer overflow that occurs via the function makeswf preprocess at /util/makeswf utils.c. Recommendations: For libming version 0.4.8, at the moment, there is no information about a newer...
CVE-2023-26265
The Borg theme before 1.1.19 for Backdrop CMS does not sufficiently sanitize path arguments that are passed in via a URL. The function borgpreprocesspage in the file template.php does not properly sanitize incoming path arguments before using them...
SUSE CVE-2021-44686
calibre before 5.32.0 contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service in htmlpreprocessrules in ebooks/conversion/preprocess.py...
XML External Entity (XXE) Injection
fr.opensagres.xdocreport:fr.opensagres.xdocreport.document is vulnerable to XML external entity XXE injection attacks. A remote attacker is able to inject malicious XML input via a weakly configured XML parser in the preprocess function...
CVE-2022-24440
The package cocoapods-downloader before 1.6.0, from 1.6.2 and before 1.6.3 are vulnerable to Command Injection via git argument injection. When calling the Pod::Downloader.preprocessoptions function and using git, both the git and branch parameters are passed to the git ls-remote subcommand in a...
Command Injection
Overview cocoapods-downloader is an A small library for downloading files from remotes in a folder. Affected versions of this package are vulnerable to Command Injection via git argument injection. When calling the Pod::Downloader.preprocessoptions function and using git, both the git and branch...