Lucene search
+L

8410 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/30 9:3 a.m.6 views

Malicious code in bestcolorsever3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4870c1bbc72ff9abf86bcdb025ddf4a63c361c3bd3081db4cc812f4564e6301c Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

7.6AI score
SaveExploits0References1
OSV
OSV
added 2024/11/30 9:3 a.m.5 views

MAL-2024-12216 Malicious code in bestcolorsever2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fa4352627d3e53d9bea22f4b439c0749f5a88407f6dda914fe43ca7612c5b101 Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

7.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/30 9:3 a.m.6 views

Malicious code in calctestchristmas (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cc3d0aad00732ac597c39a82c41efa9ec9a102544ff1540266321e31b1fdd3b5 Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

7.6AI score
SaveExploits0References1
OSV
OSV
added 2024/11/30 9:3 a.m.5 views

MAL-2024-12312 Malicious code in newpackagetest2024 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1e2e6f858089751c96fa15bde74d24a4dc6a68758e3ee4870a9c0d1f7c66d378 Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

7.5AI score
SaveExploits0References1
OSV
OSV
added 2024/11/30 9:3 a.m.4 views

MAL-2024-12226 Malicious code in calccc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 66371c79f4cedb638d8d283883415c46a4bf6be25e3699fe5229bc8cd71a2f0a Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

7.5AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/30 9:3 a.m.8 views

Malicious code in newpackagetest2024 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1e2e6f858089751c96fa15bde74d24a4dc6a68758e3ee4870a9c0d1f7c66d378 Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

7.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/30 9:3 a.m.7 views

Malicious code in bettercolorstesting (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 607fc60886a9983c22c65cd01bb93585f27b0830f203f3b3b181ff12026ea036 Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

7.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/30 9:3 a.m.9 views

Malicious code in calc123lorc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8694d9aee1895d2410aefdedcf0d8ca642301ed44085b3674a62856a4d4e42b2 Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

7.6AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/11/30 9:3 a.m.8 views

Malicious code in calcnotepad (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 84ad749380bb774a5cc7da818c03f863ee2838773e46e0a5c4cff469e1647962 Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

7.6AI score
SaveExploits0References1
OSV
OSV
added 2024/11/30 9:3 a.m.2 views

MAL-2024-12228 Malicious code in calctestchristmas (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cc3d0aad00732ac597c39a82c41efa9ec9a102544ff1540266321e31b1fdd3b5 Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

7.5AI score
SaveExploits0References1
OSV
OSV
added 2024/11/30 9:3 a.m.6 views

MAL-2024-12215 Malicious code in bestcolorsever (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8335ea2981241d7eb1836338e2a942abf4f5096eb264b0ceb13e85ec435b6465 Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

7.5AI score
SaveExploits0References1
OSV
OSV
added 2024/11/30 9:3 a.m.3 views

MAL-2024-12225 Malicious code in calc123lorc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8694d9aee1895d2410aefdedcf0d8ca642301ed44085b3674a62856a4d4e42b2 Packages either test the malicious behaviour, or actually download and run a simple remote script during the installation. --- Category: PROBABLYPENTEST -...

7.5AI score
SaveExploits0References1
OSV
OSV
added 2024/11/29 11:58 a.m.13 views

OESA-2024-2494 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: bonding: stop the device in bondsetupbyslave Commit 9eed321cde22 "net: lapbether: only support ethernet devices" has been able to keep syzbot away from net/lapb,...

9.8CVSS6.3AI score0.00659EPSS
SaveExploits0References36
OSV
OSV
added 2024/11/29 6:15 a.m.7 views

CVE-2024-10704

The Photo Gallery by 10Web WordPress plugin before 1.8.31 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.8AI score0.00369EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/11/29 12:0 a.m.11 views

PT-2024-16479 · 10Web · The Photo Gallery

Name of the Vulnerable Software and Affected Versions: The Photo Gallery by 10Web versions prior to 1.8.31 Description: The issue concerns a Stored Cross-Site Scripting XSS vulnerability. It arises because the plugin does not properly sanitise and escape some of its settings, allowing...

4.8CVSS7.8AI score0.00369EPSS
SaveExploits1References7
NVD
NVD
added 2024/11/28 10:15 a.m.15 views

CVE-2024-49502

A Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in the Setup Wizard, HTTP Proxy credentials pane in spacewalk-web allows attackers to attack users by providing specially crafted URLs to click. This issue affects Container...

4.6CVSS0.00271EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/28 9:26 a.m.13 views

CVE-2024-49502 Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web

A Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in the Setup Wizard, HTTP Proxy credentials pane in spacewalk-web allows attackers to attack users by providing specially crafted URLs to click. This issue affects Container...

4.6CVSS6.8AI score0.00271EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/28 9:26 a.m.49 views

CVE-2024-49502

CVE-2024-49502 is a cross-site scripting vulnerability in the Setup Wizard, HTTP Proxy credentials pane of spacewalk-web. It affects SUSE Manager Server 4.3 (and related Spacewalk components) prior to versions updated by SUSE-SU-2024:4007-1, specifically before 4.3.42-150400.3.52.1 for the 4.3 li...

4.6CVSS4AI score0.00271EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/28 9:26 a.m.20 views

CVE-2024-49502 Reflected XSS in Setup Wizard, HTTP Proxy credentials pane in spacewalk-web

A Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in the Setup Wizard, HTTP Proxy credentials pane in spacewalk-web allows attackers to attack users by providing specially crafted URLs to click. This issue affects Container...

4.6CVSS0.00271EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/28 9:20 a.m.21 views

CVE-2024-49503 Reflected XSS in Setup Wizard, Organization Credentials in spacewalk-web

A Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in SUSE manager allows attackers to execute Javascript code in the organization credentials sub page. This issue affects Container suse/manager/5.0/x8664/server:5.0.2.7.8.1: before...

4.6CVSS0.00271EPSS
SaveExploits0References1
Rows per page
Query Builder