1184 matches found
CVE-2023-53579
In the Linux kernel, the following vulnerability has been resolved: gpio: mvebu: fix irq domain leak Uwe Kleine-König pointed out we still have one resource leak in the mvebu driver triggered on driver detach. Let's address it with a custom devm action...
EUVD-2024-44910
Malicious code in bioql PyPI...
EUVD-2024-44939
Malicious code in bioql PyPI...
EUVD-2025-27934
Malicious code in bioql PyPI...
EUVD-2025-27801
Malicious code in bioql PyPI...
EUVD-2024-47692
Malicious code in bioql PyPI...
EUVD-2023-2119
Malicious code in bioql PyPI...
EUVD-2024-41530
Malicious code in bioql PyPI...
Malicious code in gradio-videotimeline (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4c60699afd7e95b0d638703849ef060a53327d2aa47f98909ced4e7327ffea3c Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Exploit for Use After Free in Microsoft
PoC exploit for CVE-2019-0708. The target product/service is Windows Remote Desktop, and the vulnerability class/vector is a remote code execution RCE vulnerability. The probable entry point is the poc.py script, which is typically invoked by running it directly. The expected impact is remote cod...
Malicious code in pokemon-app-sdk (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f6c79d8e736c89d71abb3438a63c2b22868d2a31b61125c1f641c53fb0da2909 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
CVE-2025-40641: Improper Neutralization of Input During Web Page Generation
Cross-site Scripting XSS vulnerability stored in Multi-Purpose Inventory Management System, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request using the productname parameter in /ControllerProducts/update. This vulnerability could allow a remote us...
Malicious code in onnxruntime-winml (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5566aa4ecc644b36e90902092563c05e1852d751381539398f2307ae1fbefae6 Package is just calling home and there is no other purpose --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything th...
MAL-2025-191806 Malicious code in onnxruntime-winml (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5566aa4ecc644b36e90902092563c05e1852d751381539398f2307ae1fbefae6 Package is just calling home and there is no other purpose --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything th...
MAL-2025-191817 Malicious code in private-evolution (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 b0fcdd3ad61af1881ab9e5e8b9fb871a0e142868c0be585594fcd32b5f069f6c Package is just calling home and there is no other purpose --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything th...
MAL-2025-44469 Malicious code in green-noted-purpose (npm)
The package green-noted-purpose was found to contain malicious code...
Malicious code in green-noted-purpose (npm)
The package green-noted-purpose was found to contain malicious code...
gpio: prevent potential speculation leaks in gpio_device_get_desc()
...
MAL-2025-191804 Malicious code in notary-client (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d6777fd3be7abdd8775b30e889a1bd66c4bef8af1794600867fc7292a8b9bcd0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
CVE-2025-38613
In the Linux kernel, the following vulnerability has been resolved: staging: gpib: fix unset padding field copy back to userspace The introduction of a padding field in the gpibboardinfoioctl is showing up as initialized data on the stack frame being copyied back to userspace in function...