RaidenMAILD Mail Server v.4.9.4 - Path Traversal

Directory Traversal vulnerability in RaidenMAILD Mail Server v.4.9.4 and before allows a remote attacker to obtain sensitive information via the /webeditor/ component. id: CVE-2024-32399 info: name: RaidenMAILD Mail Server v.4.9.4 - Path Traversal author: DhiyaneshDK severity: high description: |...

Malicious code in tpu-raiden-jax (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f37dbb20f91d6812bd5bcfa84a040595ea1f9358e56f946da4efa599f7751bed On first import, tpu-raiden-jax's top-level init.py invokes a canary routine that serializes the entire os.environ dictionary along with...

MAL-2026-15930 Malicious code in tpu-raiden-jax (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f37dbb20f91d6812bd5bcfa84a040595ea1f9358e56f946da4efa599f7751bed On first import, tpu-raiden-jax's top-level init.py invokes a canary routine that serializes the entire os.environ dictionary along with...

Malicious Package

Overview tpu-raiden-jax is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

mold-cli (>=0.0.1, <=0.0.2), pygrest (1.1.0) +3 more potentially affected by CVE-2025-71176 via pytest (4.1.1)

pytest PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - mold-cli =0.0.1, =1.0.0, =0.100.2rc4, =0.100.2 - regexgen 1.0.0 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

raiden (>=0.100.2rc4, <=0.100.3rc1) potentially affected by CVE-2025-30355 via matrix-synapse (0.33.9)

matrix-synapse PYPI version 0.33.9 is affected by a known vulnerability. The following packages have a transitive dependency on matrix-synapse and may be impacted: - raiden =0.100.2rc4, =0.100.3rc1 Source cves: CVE-2025-30355 Source advisory: OSV:PYSEC-2026-1614...

raiden-services (0.12.0) potentially affected by CVE-2024-40647 via sentry-sdk (0.17.6)

sentry-sdk PYPI version 0.17.6 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - raiden-services 0.12.0 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

raiden-services (0.13.2), spotify-dl (>=7.3.0, <=7.6.0) potentially affected by CVE-2024-40647 via sentry-sdk (0.19.4)

sentry-sdk PYPI version 0.19.4 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - raiden-services 0.13.2 - spotify-dl =7.3.0, =7.6.0 Source cves: CVE-2024-40647 Source advisory: OSV:PYSEC-2026-1917...

raiden-services (0.13.2), spotify-dl (>=7.3.0, <=7.6.0) potentially affected by CVE-2023-28117 via sentry-sdk (0.19.4)

sentry-sdk PYPI version 0.19.4 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - raiden-services 0.13.2 - spotify-dl =7.3.0, =7.6.0 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...

raiden-services (0.12.0) potentially affected by CVE-2023-28117 via sentry-sdk (0.17.6)

sentry-sdk PYPI version 0.17.6 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - raiden-services 0.12.0 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...

alectio-sdk (>=0.6.2, <=0.6.14), alectiolite (0.0.1) +4 more potentially affected by CVE-2023-28117 via sentry-sdk (0.15.1)

sentry-sdk PYPI version 0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - alectio-sdk =0.6.2, =0.4.3, =0.5.0a5 Source cves: CVE-2023-28117 Source advisory: OSV:PYSEC-2026-920...

mold-cli (>=0.0.1, <=0.0.2), pygrest (1.1.0) +3 more potentially affected by CVE-2025-71176 via pytest (4.1.1)

pytest PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - mold-cli =0.0.1, =1.0.0, =0.100.2rc4, =0.100.2 - regexgen 1.0.0 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

genhtml-markdown (>=1.0.8, <=1.0.9), j2s3 (>=1.0.0, <=1.0.2) +4 more potentially affected by CVE-2025-71176 via pytest (3.8.0)

pytest PYPI version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - genhtml-markdown =1.0.8, =1.0.0, =1.0.0, =0.10.0, =1.15.7, =1.15.10 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

EUVD-2022-44862

Malicious code in bioql PyPI...

EUVD-2022-44861

Malicious code in bioql PyPI...

CVE-2023-38960

Insecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a local attacker to gain privileges and execute arbitrary code via crafted executable running from the installation directory...

raiden (>=0.100.2rc4, <=0.100.3rc1) potentially affected by CVE-2025-30355 via matrix-synapse (0.33.9)

matrix-synapse PYPI version 0.33.9 is affected by a known vulnerability. The following packages have a transitive dependency on matrix-synapse and may be impacted: - raiden =0.100.2rc4, =0.100.3rc1 Source cves: CVE-2025-30355 Source advisory: OSV:GHSA-V56R-HWV5-MXG6...

raiden (>=0.100.2rc4, <=0.100.3rc1) potentially affected by CVE-2024-37302 via matrix-synapse (0.33.9)

matrix-synapse PYPI version 0.33.9 is affected by a known vulnerability. The following packages have a transitive dependency on matrix-synapse and may be impacted: - raiden =0.100.2rc4, =0.100.3rc1 Source cves: CVE-2024-37302 Source advisory: OSV:PYSEC-2024-286...

CVE-2024-7693

Raiden MAILD Remote Management System from Team Johnlong Software has a Relative Path Traversal vulnerability, allowing unauthenticated remote attackers to read arbitrary file on the remote server...

CVE-2024-7693

Raiden MAILD Remote Management System from Team Johnlong Software has a Relative Path Traversal vulnerability, allowing unauthenticated remote attackers to read arbitrary file on the remote server...