EulerOS Virtualization 3.0.6.0 : numpy (EulerOS-SA-2020-1730)

According to the version of the numpy packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - DISPUTED An issue was discovered in NumPy 1.16.0 and earlier. It uses the pickle Python module unsafely, which allows remote attacker...

Security fix for the ALT Linux 9 package python-module-psutil version 5.7.0-alt1

5.7.0-alt1 built April 17, 2020 Anton Midyukov in task 244280 --- April 12, 2020 Vitaly Lipatov - new version 5.7.0 with rpmrb script ALT bug 38347 - CVE-2019-18874...

Format string

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

CVE-2014-6262

Multiple format string vulnerabilities in the python module in RRDtool, as used in Zenoss Core before 4.2.5 and other products, allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted third argument to the rrdtool.graph function, aka ZEN-15415...

CVE-2014-6262

CVE-2014-6262 describes multiple format string vulnerabilities in the Python RRDtool module used by Zenoss Core (before 4.2.5) and other products. An attacker can exploit a crafted third argument to rrdtool.graph to execute arbitrary code or cause an application crash (DoS). Related to CVE-2013-2...

PT-2020-7723

Name of the Vulnerable Software and Affected Versions RRDtool versions prior to 4.2.5 Zenoss Core versions prior to 4.2.5 Description The issue is related to multiple format string vulnerabilities in the python module of RRDtool. These vulnerabilities can be exploited by remote attackers to execu...

Hardcoded credentials

Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...

CVE-2013-4867

Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...

PT-2019-6978

Name of the Vulnerable Software and Affected Versions Electronic Arts Karotz Smart Rabbit version 12.07.19.00 Description The issue allows Python module hijacking. Recommendations For version 12.07.19.00, at the moment, there is no information about a newer version that contains a fix for this...

CVE-2013-4867: Improper Privilege Management

Electronic Arts Karotz Smart Rabbit 12.07.19.00 allows Python module hijacking...

Exploitivator - Automate Metasploit Scanning And Exploitation

This has only been tested on Kali. It depends on the msfrpc module for Python, described in detail here: https://www.trustwave.com/Resources/SpiderLabs-Blog/Scripting-Metasploit-using-MSGRPC/ Install the necessary Kali packages and the PostgreSQL gem for Ruby: apt-get install postgresql libpq-dev...

CVE-2013-4245

Orca has arbitrary code execution due to insecure Python module load...

UBUNTU-CVE-2013-4245

Orca has arbitrary code execution due to insecure Python module load...

CVE-2013-4245

Orca has arbitrary code execution due to insecure Python module load...

CVE-2013-4245

Removed by vendor...

CVE-2013-4245: Improper Input Validation

Orca has arbitrary code execution due to insecure Python module load...

PT-2019-4758 · Python +2 · Pam-Python +2

Name of the Vulnerable Software and Affected Versions: pam-python versions prior to 1.0.7-1 Description: The issue is related to insecure privilege management in the pam-python PAM module, which allows an attacker to escalate privileges using a specially crafted binary file with the setuid flag...

CVE-2015-1341 Apport privilege escalation through Python module imports

Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function pythonmodulepath...

UBUNTU-CVE-2019-7653

The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demonstrated by rdf2dot. This issue is specific to use of the debian/scripts...