13223 matches found
python311-3.11.11-4.1 on GA media (moderate)
python311-3.11.11-4.1 on GA media Announcement ID: openSUSE-SU-2025:14872-1 Rating: moderate Cross-References: CVE-2025-1795 CVSS scores: CVE-2025-1795 SUSE : 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N CVE-2025-1795 SUSE : 2.3...
OPENSUSE-SU-2025:14885-1 python313-3.13.2-3.1 on GA media
These are all security issues fixed in the python313-3.13.2-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14872-1 python311-3.11.11-4.1 on GA media
These are all security issues fixed in the python311-3.11.11-4.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2025:14873-1 python312-3.12.9-2.1 on GA media
These are all security issues fixed in the python312-3.12.9-2.1 package on the GA media of openSUSE Tumbleweed...
Malicious code in ccxt-mexc-futures (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 f2eb5eb75679b536c430ad6d5440e63fbe1d1cd391ab1abf2a411dae3a768ed8 There is a hidden code that overwrites the default method and downloads remote data, which contains the dictionary pretending to be the right value, and a hidd...
MAL-2025-3019 Malicious code in wiki-requests (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9d4143f13c89e66e8f5b2c0905a57d6d25f6d02d46b62aef3e58d4b1f2dda697 Setup.py attempts to exfiltrate information about the system and span a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like...
Malicious code in wiki-requests (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 9d4143f13c89e66e8f5b2c0905a57d6d25f6d02d46b62aef3e58d4b1f2dda697 Setup.py attempts to exfiltrate information about the system and span a reverse shell --- Category: MALICIOUS - The campaign has clearly malicious intent, like...
Advisory ROSA-SA-2025-2772
Software: python-urllib3 1.25.10 OS: ROSA Virtualization 3.0 packageevrstring: python-urllib3-1.25.10-5.rv30 CVE-ID: CVE-2021-33503 BDU-ID: 2022-00586 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the HTTP client for Python urllib3 is related to uncontrolled resource consumption. Exploitation of t...
Malicious code in tlsclient3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 612e1a598a61304a9ae3550acb835ef5962f596bb74e857c2a035ba090e57dc4 Obfuscated code starts a multi-stage infection --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
Malicious code in heroku-tl (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8a78aff2389300306864bb3d44e1ac70675e128845a4d734dae5ffbc39076b93 Clone of a legit Telegram client, with a hidden code that, under some conditions, can attempt to destroy the Linux OS. --- Category: MALICIOUS - The campaign h...
OPENSUSE-SU-2025:14858-1 python311-GitPython-3.1.44-1.1 on GA media
These are all security issues fixed in the python311-GitPython-3.1.44-1.1 package on the GA media of openSUSE Tumbleweed...
Malicious code in colorizetext (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 23bf8532a92e751d1429028961f8b21697466cf5938e629cd11105928584f017 Package has a hidden code starting an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
MAL-2025-2949 Malicious code in colorizetext (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 23bf8532a92e751d1429028961f8b21697466cf5938e629cd11105928584f017 Package has a hidden code starting an infostealer --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign:...
Malicious code in enquiry-exam (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 590114fe4174abb1ff72c06bf128aef53bd76a67eaeca5d5e891be001f6b0c17 Package contains a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-03-certifications...
Malicious code in certifications (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7d51c9defecdd382c5048eb6f92b32558355b8457b2b5cd63f3d86e12e8ed35b Package contains a reverse shell. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2025-03-certifications...
Linux Distros Unpatched Vulnerability : CVE-2022-31117
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. In versions prior to 5.4.0 an error occurring while reallocating a...
Malicious code in pythonhttp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3ed5759c2260c5467724f053f3d59eac62f5491fc2d03350fef0a6f832652e3b Installing the package starts a heavily obfuscated Powershell Script that attempts to at least overwrite copied crypto wallets --- Category: MALICIOUS - The...
Linux Distros Unpatched Vulnerability : CVE-2020-14422
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lib/ipaddress.py in Python through 3.8.3 improperly computes hash values in the IPv4Interface and IPv6Interface classes, which might allow a remote attacker to...
Linux Distros Unpatched Vulnerability : CVE-2020-8492
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Python 2.7 through 2.7.17, 3.5 through 3.5.9, 3.6 through 3.6.10, 3.7 through 3.7.6, and 3.8 through 3.8.1 allows an HTTP server to conduct Regular Expression...