MAL-2024-12250 Malicious code in crunchie (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f26d858f791d6d12aab4d70b3f5494c2b675934ba0b13cffa405ecd0686cfa91 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12274 Malicious code in flexssl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 03236867334bb1faf1e018f54b89046a0edf300be0152c00bf921dadaee600b0 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12328 Malicious code in postgresql-connector-python (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 87f55ac62324b5fc631b711e125f897d8ae10d06a9d80173463d9a5fa1915302 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

The vulnerability of the setup/install.php component of the osTicket customer support system, which allows a perpetrator to carry out cross-site scripting attacks

The vulnerability of the osTicket customer support system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Enhancesoft osTicket cross-site scripting vulnerability (CNVD-2020-16824)

Enhancesoft osTicket is a U.S. Enhancesoft's open source ticketing system. A cross-site scripting vulnerability exists in the setup/install.php file in Enhancesoft osTicket versions prior to 1.10.7 and 1.12.x versions prior to 1.12.1. The vulnerability stems from the lack of proper validation of...

Microsoft Internet Explorer Install Engine contains a buffer overflow vulnerability

Overview The Active Setup Install Engine in Microsoft Internet Explorer contains a buffer overflow vulnerability. This may allow an attacker to take complete control of a vulnerable system. Description The Active Setup Install Engine inseng.dll permits cabinet files to be launched and executed...