Malicious code in iscord-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 836eb1c3ea85378a09ea1b1addf09582b1b353904c45c49db5e74f3286bb869b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in discordd-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 94a11f47a6f60bdd9d6f56a884580ca341594bd92b085d3a2a73b2a4e5453859 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in disord-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9ea52141d58eccfcc0af3eb2b3b2a94bf9d557e019736322d2490d6a4eb157cd Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in discoord-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 68df26950a7ff2b46cdf12d50fb094b9ff5f9f7020f2a3c56e945f753289057c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in discorrd-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e957738e8f50c7f8e954d8bd1cd069d1f9687ec8b3254d1fc4e6ae2dcf01545a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in discrd-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7c6ed6e6d68e0533613c82cc8f5e3936d008f646f9912f62439624987729122f Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in requetss-toolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ffc78f1d671833c4f7434ac5c3279fae174b7aed78baabf9f5325b587d2b8693 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

CVE-2023-0575 Remote Code Execution

External Control of Critical State Data, Improper Control of Generation of Code 'Code Injection' vulnerability in YugaByte, Inc. Yugabyte DB on Windows, Linux, MacOS, iOS DevopsBase.Java:execCommand, TableManager.Java:runCommand modules allows API Manipulation, Privilege Abuse. This vulnerability...

PT-2023-16376 · Yugabyte · Yugabytedb

Name of the Vulnerable Software and Affected Versions: Yugabyte DB versions prior to 2.2.0.0 Description: The issue is related to External Control of Critical State Data and Improper Control of Generation of Code, also known as 'Code Injection' vulnerability. This vulnerability affects YugaByte,...

py-cryptography -- includes a vulnerable copy of OpenSSL

pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 0.8.1-39.0.0 are vulnerable to a security issue. More details about the vulnerabilities themselves can be found in https://www.openssl.org/news/secadv/20221213.txt and...

SUSE: Security Advisory (SUSE-SU-2023:0161-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-py (SUSE-SU-2023:0161-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:0161-1 advisory. - CVE-2022-42969: Fixed an excessive resource consumption that could be triggered when interacting with a...

CVE-2013-10009

A vulnerability was found in DrAzraelTod pyChao and classified as critical. Affected by this issue is the function klauen/lesen of the file modfun/init.py. The manipulation leads to sql injection. The patch is identified as 9d8adbc07c384ba51c2583ce0819c9abb77dc648. It is recommended to apply a...

Sql injection

A vulnerability was found in DrAzraelTod pyChao and classified as critical. Affected by this issue is the function klauen/lesen of the file modfun/init.py. The manipulation leads to sql injection. The patch is identified as 9d8adbc07c384ba51c2583ce0819c9abb77dc648. It is recommended to apply a...

CVE-2013-10009

CVE-2013-10009 affects DrAzraelTod pyChao; the vulnerability is in the function klauen/lesen of mod_fun/init .py, enabling SQL injection. A patch is identified as 9d8adbc07c384ba51c2583ce0819c9abb77dc648. Remediation is to apply the patch to fix the issue.

Blind Eagle Hackers Return with Refined Tools and Sophisticated Infection Chain

A financially motivated threat actor tracked as Blind Eagle has resurfaced with a refined toolset and an elaborate infection chain as part of its attacks targeting organizations in Colombia and Ecuador. Check Point's latest research offers new insights into the Spanish-speaking group's tactics an...

Cross-Site Scripting (XSS)

pyrdfa3 is vulnerable to cross site scripting. The vulnerability exists in the getoption function in init.py due to unsanitized data, which will allow an attacker to inject and execute malicious code...

GHSA-894Q-WPG5-MF2H pyRdfa3 Cross-site Scripting vulnerability

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function getoption of the file pyRdfa/init.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e...

a62-emotion (>=0.10.12 <=0.11.4), agent-atm (>=0.1.0 <=0.1.1) +103 more potentially affected by unknown CVE via tensorflow-cpu (>=1.15.0 <=2.7.4)

tensorflow-cpu PYPI version =1.15.0, =0.10.12, =0.1.0, =2.0.0, =2.0.0, =1.0.0, =0.0.5, =0.3.0, =0.0.1, =0.8.1, =0.1.1, =1.3.0, =0.1.0.dev1, =0.1.0.dev202107081840 and more Source cves: unknown CVE Source advisory: OSV:GHSA-XF83-Q765-XM6M...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS. This is vulnerable when an input token that is not a UTF-8 bytestring will trigger a CHECK fail in tf.rawops.PyFunc. Details Denial of Service DoS describes a family of attacks, all aimed at making a system...