Malicious code in wehaveatogether (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2b9ca08882196c44c275e3690b4f186ef0df469070563abbd190b8194475023a Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

Malicious code in test-tool-devdevrl-hackerone (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9ebec7caa83974b9d99d79e73ba3ba948318120279d3a5b2a97ee7efddc023ef Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

Malicious code in python-project-wntliogu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 82bffbaa9f040ea19ff4e9fe678df68b1be71418f80fcd665ecc4f729512df19 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

Malicious code in pitest117 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 43f26cba5babf757388adacc9a7c7affeb182356ccf10416c13e9826e6eaf9a4 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

Malicious code in easyioctl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 17bb7b2d6ca02c6c077bc420bf4b9136e424f53cf276f61529b19806e5bb5bca Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

Malicious code in chatgpt-aitools (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 78e2fd98e1c4b97347b9ea62a0db52d71e3ab25a8e62eb8340afd4b5b5ab5d94 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

MAL-2024-12283 Malicious code in hello-bozzo2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 96e02710356e7f0a4dee853d165a2d18a0a4addad3a07c397e495f61f6bc92fa Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

MAL-2024-12276 Malicious code in get-root (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1cb448108b11968d4fb13e0d12a3c089afa7eaeb7b288d6bc8e022ff1f4dd34a Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

MAL-2024-12326 Malicious code in pitest117 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 43f26cba5babf757388adacc9a7c7affeb182356ccf10416c13e9826e6eaf9a4 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

MAL-2024-12214 Malicious code in basic-arithmetics (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a4b7ea06431a2127d9e1dd55c10c2182300c69f49150becb9536a94503acaadc Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

CVE-2024-3282

The WP Table Builder WordPress plugin through 1.5.0 does not sanitise and escape some of its Table data, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-3282 WP Table Builder <= 1.5.0 - Admin+ Stored XSS

The WP Table Builder WordPress plugin through 1.5.0 does not sanitise and escape some of its Table data, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

DEBIAN-CVE-2022-48893

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Cleanup partial engine discovery failures If we abort driver initialisation in the middle of gt/engine discovery, some engines will be fully setup and some not. Those incompletely setup engines only have...

The vulnerability of the Linux operating system’s kernel’s ipv6 component, which allows a hacker to access confidential information

The vulnerability of the Linux operating system’s IPv6 kernel component is related to reading data beyond the boundary during the installation of HMAC. Exploiting this vulnerability can allow an attacker to access confidential information...

CVE-2024-5939

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'setupwizard' function in all versions up to, and including, 3.13.0. This makes it possible for unauthenticated attackers to read the...

WordPress plugin GiveWP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-37254 · WordPress · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP – Donation Plugin and Fundraising Platform versions up to, and including, 3.13.0 Description: The issue is related to unauthorized access of data due to a missing capability check on the setup wizard function. This allows unauthenticat...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a null pointer dereference issue in the kspciesetuprcappregs function...

CVE-2024-42246

...

PT-2024-26149 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: A logic error in the code of shouldRestrictOverlayActivities in UsbProfileGroupSettingsManager.java could lead to a possible escape from SUW, resulting in local escalation of privilege with...