CVE-2022-36024

py-cord is a an API wrapper for Discord written in Python. Bots creating using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the application.commands scope without the bot scope. Currently, it appears that all public bots that use slash commands are...

CVE-2022-42969 affecting package python-py 1.10.0-3

CVE-2022-42969 affecting package python-py 1.10.0-3. This CVE either no longer is or was never applicable...

CVE-2022-42969 affecting package python-py 1.10.0-1

CVE-2022-42969 affecting package python-py 1.10.0-1. No patch is available currently...

Malicious code in py-colorprinting (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11666 Malicious code in py-colorprinting (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in afriton-py (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11515 Malicious code in afriton-py (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-10205 Malicious code in web3-py-tools (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-10110 Malicious code in py-solana-cli (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in py-solana-cli (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in class-py (PyPI)

--- -= Per source details. Do not edit below this line.=-...

DEBIAN-CVE-2024-9979

A flaw was found in PyO3. This vulnerability causes a use-after-free issue, potentially leading to memory corruption or crashes via unsound borrowing from weak Python references...

Security Bulletin: Vulnerability in pytest-dev py affects IBM watsonx.data

Summary pytest-dev py is vulnerable to a denial of service, caused by a regular expression denial of service ReDoS flaw by the InfoSvnCommand argument. By sending a specially-crafted regex info data, a remote attacker could exploit this vulnerability to cause a denial of service condition. This c...

CVE-2024-8948

A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpzasbytes of the file py/objint.c. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and ma...

CVE-2024-8947

A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use after free. The attack can be launched remotely. The complexity of an attack is rather high. The...

CVE-2024-8947: Use After Free

A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use after free. The attack can be launched remotely. The complexity of an attack is rather high. The...

MicroPython 资源管理错误漏洞

MicroPython is a small open source Python programming language interpreter open-sourced by MicroPython. A resource management error vulnerability exists in MicroPython version 1.22.2, which stems from unknown functionality in the py/objarray.c file that leads to reuse after release...

PT-2024-39333

Name of the Vulnerable Software and Affected Versions: MicroPython version 1.23.0 Description: A critical issue has been found, affecting the mpz as bytes function of the file py/objint.c. This issue leads to a heap-based buffer overflow. The attack can be launched remotely. The problem arises wh...

CVE-2024-8948: Heap-based Buffer Overflow

A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpzasbytes of the file py/objint.c. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and ma...

Fedora: Security Advisory (FEDORA-2023-f970cbb557)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...