Lucene search
+L

3 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/03 9:26 p.m.20 views

Malicious code in gauth-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aea1fab5eb3b9422c65232e53e79eb71ba3436355601cd61e7a7b0177779df4e Package impersonates Google and attempts to exfiltrate various credential files. It also setups PTH file for automated start during Python initialization. In t...

5.8AI score
SaveExploits0References1
CVE
CVE
added 2026/01/07 8:26 p.m.25 views

CVE-2026-22188

Panda3D up to version 1.10.16 is affected by a DoS due to unbounded stack allocation in the deploy-stub. The deploy-stub allocates argv_copy and argv_copy2 with alloca() based on attacker-controlled argc without validation, which can exhaust stack space and crash the process during Python interpr...

6.9CVSS5.7AI score0.00181EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2026/01/07 8:26 p.m.9 views

CVE-2026-22188 Panda3D <= 1.10.16 Deploy-Stub Stack Exhaustion via Unbounded alloca()

The deploy-stub component in Panda3D versions up to and including 1.10.16 contains a denial of service vulnerability due to unbounded stack allocation. The deploy-stub executable allocates argvcopy and argvcopy2 using alloca based directly on the attacker-controlled argc value without validation...

6.9CVSS5.9AI score
SaveExploits0References6
Rows per page
Query Builder