1926 matches found
CVE-2023-28859
CVE-2023-28859 affects redis-py: vulnerable in versions before 4.4.4 and 4.5.x before 4.5.4. The issue leaves a connection open after canceling an async Redis command at an inopportune time, potentially sending response data to the client of an unrelated request (e.g., non-pipeline operations). T...
CVE-2023-28859
redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request. This could, for example, happen for a non-pipeline operation. NOTE: the solutions for CVE-2023-288...
CVE-2023-28858
redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4....
redis-py 安全漏洞
redis-py is a Python based redis interface library. A security vulnerability exists in redis-py versions prior to 4.5.4 and 4.5.x versions prior to 4.5.4. An attacker exploited the vulnerability to send response data to an unrelated requesting client...
CVE-2023-28858
CVE-2023-28858 affects the Python Redis client, redis-py, for versions before 4.5.3. The issue is a connection that may remain open after canceling an async Redis command at an inopportune time, which can lead to leakage of response data to the client of an unrelated request in an off-by-one mann...
CVE-2023-28858
redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4....
CVE-2023-28858
redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an unrelated request in an off-by-one manner. NOTE: this CVE Record was initially created in response to reports about ChatGPT, and 4.3.6, 4.4....
py39-redis -- can send response data to the client of an unrelated request
drago-balto reports: redis-py through 4.5.3 and 4.4.3 leaves a connection open after canceling an async Redis command at an inopportune time in the case of a non-pipeline operation, and can send response data to the client of an unrelated request. NOTE: this issue exists because of an incomplete...
Malicious code in py-controlpingcraft (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8c99058f83d5f7d5e4269c4fa6066cc572cac0bca48b23b4d296b84a9b658bdd EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in py-mcultracraft (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 05f872d3d839e83f4cfa6a29e16e93759396a58f0bb74d8f93ec8f14420b0a40 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in py-toolvmintel (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2ccac77210f7a5f6eb7a2b5cde9438746cb1cb075e08e331a9fd47811447ce0c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-5702 Malicious code in py-toolvmintel (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2ccac77210f7a5f6eb7a2b5cde9438746cb1cb075e08e331a9fd47811447ce0c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
SUSE SLES12 Security Update : python-py (SUSE-SU-2023:0681-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0681-1 advisory. Bugfixes: - Fixed bugs introduced with the fix for CVE-2022-42969 bsc1204364, bsc1208181. Tenable has extracted the preceding description...
MAL-2023-5030 Malicious code in py-controlguipost (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 480e1dc18ed2f651bc3cd4dfddefc30c94cf887485d83b3d88432c7a9384cb42 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in py-urlhttphttp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6e1a76dead03b03b5b1a66c3ac3c2845b95ccf2e6762f24639b562bc76e8e7a7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-5722 Malicious code in py-urlhttphttp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6e1a76dead03b03b5b1a66c3ac3c2845b95ccf2e6762f24639b562bc76e8e7a7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in py-paypalinfopip (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx d00980074e219dc11140953e97dbbf1b8f13c4d6efc450d19cfccfd12c8848b2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-5395 Malicious code in py-paypalinfopip (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx d00980074e219dc11140953e97dbbf1b8f13c4d6efc450d19cfccfd12c8848b2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
