Malicious code in py-c9rd (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in py-cdord (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5582 Malicious code in py-c9rd (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in py-c0dd (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in py-c0red (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5580 Malicious code in py-c0dd (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in py-c0ard (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in py-c0crd (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in discord-py-v13 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-5067 Malicious code in discord-py-v13 (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in colorama-py (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4920 Malicious code in colorama-py (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4882 Malicious code in captcha-py (PyPI)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-4745 Malicious code in ai-solver-py (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Remote Code Execution via path traversal bypass in lollms

CVE-2024-4320 describes a vulnerability in the parisneo/lollms software, specifically within the ExtensionBuilder.buildextension function. The vulnerability arises from the /mountextension endpoint, where a path traversal issue allows attackers to navigate beyond the intended directory structure...

OPENSUSE-SU-2024:12772-1 python310-markdown-it-py-2.2.0-1.1 on GA media

These are all security issues fixed in the python310-markdown-it-py-2.2.0-1.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-4078 Arbitrary Code Execution in parisneo/lollms

A vulnerability in the parisneo/lollms, specifically in the /unInstallbinding endpoint, allows for arbitrary code execution due to insufficient sanitization of user input. The issue arises from the lack of path sanitization when handling the name parameter in the unInstallbinding function, allowi...

CVE-2024-2358 Path Traversal leading to Remote Code Execution in parisneo/lollms-webui

A path traversal vulnerability in the '/applysettings' endpoint of parisneo/lollms-webui allows attackers to execute arbitrary code. The vulnerability arises due to insufficient sanitization of user-supplied input in the configuration settings, specifically within the 'extensions' parameter...

CVE-2024-2358 Path Traversal leading to Remote Code Execution in parisneo/lollms-webui

A path traversal vulnerability in the '/applysettings' endpoint of parisneo/lollms-webui allows attackers to execute arbitrary code. The vulnerability arises due to insufficient sanitization of user-supplied input in the configuration settings, specifically within the 'extensions' parameter...

CVE-2024-2366: Improper Neutralization of Special Elements used in a Command

A remote code execution vulnerability exists in the parisneo/lollms-webui application, specifically within the reinstallbinding functionality in lollmscore/lollms/server/endpoints/lollmsbindinginfos.py of the latest version. The vulnerability arises due to insufficient path sanitization, allowing...