MAL-2024-12325 Malicious code in pitest115 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 eafda224bcd5572ef89818a64323563992432421a36cdec585dee3dc0a04469c Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

MAL-2024-12281 Malicious code in hack-test (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bedfa0b9b013ca3de0418ac30c7192adef27902eee78ae8bdf2d74afe652c3e2 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

MAL-2024-12327 Malicious code in popeye-shyam-love (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3eb788819517c48b546562559edfe038373cacc957f84f6b3647f9bfaedf0335 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

MAL-2024-12268 Malicious code in expkg-am (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 36b7980049911172764372f2e4d93b74e1ff019b9c6f9860be544e91f7f79a28 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

Malicious code in pitest117 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 43f26cba5babf757388adacc9a7c7affeb182356ccf10416c13e9826e6eaf9a4 Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

MAL-2024-12278 Malicious code in gltest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 538a0e3540a764042a57930b8729d61b05747d057875504da316d6ee14bf91fd Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

CVE-2024-3282

The WP Table Builder WordPress plugin through 1.5.0 does not sanitise and escape some of its Table data, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2024-3282 WP Table Builder <= 1.5.0 - Admin+ Stored XSS

The WP Table Builder WordPress plugin through 1.5.0 does not sanitise and escape some of its Table data, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

DEBIAN-CVE-2022-48893

In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Cleanup partial engine discovery failures If we abort driver initialisation in the middle of gt/engine discovery, some engines will be fully setup and some not. Those incompletely setup engines only have...

Linux kernel IPv6 Information Disclosure

The vulnerability of the Linux operating system’s IPv6 kernel component is related to reading data beyond the boundary during the installation of HMAC. Exploiting this vulnerability can allow an attacker to access confidential information...

CVE-2024-5939

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'setupwizard' function in all versions up to, and including, 3.13.0. This makes it possible for unauthenticated attackers to read the...

WordPress plugin GiveWP 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

PT-2024-37254 · WordPress · Givewp

Name of the Vulnerable Software and Affected Versions: GiveWP – Donation Plugin and Fundraising Platform versions up to, and including, 3.13.0 Description: The issue is related to unauthorized access of data due to a missing capability check on the setup wizard function. This allows unauthenticat...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from a null pointer dereference issue in the kspciesetuprcappregs function...

net sunrpc: Remap EPERM in case of connection failure in xs_tcp_setup_socket

...

PT-2024-26149

Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A logic error in the code of shouldRestrictOverlayActivities in UsbProfileGroupSettingsManager.java could lead to a possible escape from SUW, resulting in local escalation of privilege with n...

kernel: netfilter: nft_flow_offload: reset dst in route object after setting up flow

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftflowoffload: reset dst in route object after setting up flow dst is transferred to the flow object, route object does not own it anymore. Reset dst in route object, otherwise if flowoffloadadd fails, error path...

PT-2024-6979

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a use-after-free panic in the mtk wed setup tc block cb function. When there are multiple ap interfaces on one band and with WED on, turning the interface down wi...

CVE-2024-7704: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was found in Weaver e-cology 8. It has been classified as problematic. Affected is an unknown function of the file /cloudstore/ecode/setup/ecologydev.zip of the component Source Code Handler. The manipulation leads to information disclosure. It is possible to launch the attack...

Malicious code in artifact-lab-3-package (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0c18a16c7c21d93a8819aed298f6691835b1a31546ca573eb94ce4265d4fb291 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...