Lucene search
+L

669 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/02 8:19 a.m.7 views

Malicious code in hooktest3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3d1104ab742749c40acd3c4c989dba15890db64fd22f688dea72727fbc5b9d23 During installation, the package starts a code to retrieve and execute commands from Discord --- Category: MALICIOUS - The campaign has clearly malicious inten...

7.8AI score
SaveExploits0References1
EUVD
EUVD
added 2025/12/01 6:30 p.m.6 views

EUVD-2024-55105

The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...

8.1CVSS7.2AI score0.00462EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/23 4:26 p.m.7 views

Malicious code in hooktest1 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 b3e91d71ab21e3575f1354593a314d50bc188b0db7b3851040e522426a765417 During installation, the package starts a code to retrieve and execute commands from Discord --- Category: MALICIOUS - The campaign has clearly malicious inten...

7.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/20 10:25 p.m.7 views

Malicious code in kdewebhelper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 da8701a407522875f63d2aaa28d27194fe8e2faa4d7782fd66639f224ae62dcd Importing the module connects to a Telegram bot and provides its operator with abilities to execute commands, exfiltrate and encrypt data. The target group see...

7.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/11/20 11:29 a.m.6 views

Malicious code in siitoogether (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6fccd687f1acb55e6da0782b08ef14b3e8be5587dee4743a163a106c48390a50 Importing the module starts an RAT-like process capable of execute remote commands, with the C2 through Discord --- Category: MALICIOUS - The campaign has...

7.6AI score
SaveExploits0References1
OSV
OSV
added 2025/11/20 11:29 a.m.4 views

MAL-2025-191867 Malicious code in siitoogether (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 6fccd687f1acb55e6da0782b08ef14b3e8be5587dee4743a163a106c48390a50 Importing the module starts an RAT-like process capable of execute remote commands, with the C2 through Discord --- Category: MALICIOUS - The campaign has...

7.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/10/29 10:18 p.m.5 views

Malicious code in kingwork-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5f5651b094b6f22f4f79f533c24bb398eb10ed340bfccdcdc75fa5dcfc98b8bf The package contains the same code to deobfuscate code as in previous packages, but the malicious code itself is missing --- Category: MALICIOUS - The campaign...

7.6AI score
SaveExploits0References1
OSV
OSV
added 2025/10/29 10:18 p.m.6 views

MAL-2025-191775 Malicious code in kingwork-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5f5651b094b6f22f4f79f533c24bb398eb10ed340bfccdcdc75fa5dcfc98b8bf The package contains the same code to deobfuscate code as in previous packages, but the malicious code itself is missing --- Category: MALICIOUS - The campaign...

7.5AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/10/15 1:45 p.m.9 views

CVE-2025-46581

ZTE's ZXCDN product is affected by a Struts remote code execution RCE vulnerability. An unauthenticated attacker can remotely execute commands with non-root privileges...

9.8CVSS8.5AI score0.00748EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/10/08 12:0 a.m.3 views

The vulnerability of the Snapshot/Restore commands of the AdminServer component of the centralized service, which is used for managing configuration information, naming, distributed synchronization, and providing group services via Apache ZooKeeper, allows attackers to execute arbitrary commands.

The vulnerability of the Snapshot/Restore commands of the AdminServer component of the centralized service, which is used to manage configuration information, name resolution, distributed synchronization, and provide group services for Apache ZooKeeper, stems from improper handling of insufficien...

4.3CVSS6.1AI score0.00294EPSS
SaveExploits0References5Affected Software7
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-5630

Malware in sbrugna...

8.8CVSS8.8AI score0.02375EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2016-1327

Malware in sbrugna...

7.8CVSS7.7AI score0.00381EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2007-4315

Malware in sbrugna...

7.5CVSS6.4AI score0.01063EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2021-20635

Malware in sbrugna...

8.8CVSS8.6AI score0.02871EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2020-2246

Malware in sbrugna...

7.8CVSS7.5AI score0.00914EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2010-4074

Malware in sbrugna...

5CVSS6.1AI score0.02069EPSS
SaveExploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2017-12861

Malware in sbrugna...

6.5CVSS6.6AI score0.00842EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2008-6039

Malware in sbrugna...

6.8CVSS6.4AI score0.00988EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2019-4841

Malware in sbrugna...

9.8CVSS9.2AI score0.02856EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2018-17948

Malware in sbrugna...

9CVSS8.8AI score0.03079EPSS
SaveExploits0References5
Rows per page
Query Builder