1555 matches found
MAL-2025-6528 Malicious code in jd-mlops (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 27e0c1b0bb778a762b23a541daa571391b073db56f64e90af5a403dffe5bbff3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
ROS-20240716-01
OpenSearch software package vulnerability related to unintentional access to resources of of users in the Dashboards Reports plugin. Exploitation of the vulnerability could allow an attacker to compromise the integrity of data. impact data integrity OpenSearch software package vulnerability relat...
CVE-2024-37147 GLPI allows Authenticated File Upload to Restricted Tickets
GLPI is an open-source asset and IT management software package that provides ITIL Service Desk features, licenses tracking and software auditing. An authenticated user can attach a document to any item, even if the user has no write access on it. Upgrade to 10.0.16...
Malicious code in @zitterorg/nostrum-porro (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 75ba4349d9cf12394e1cc37838cb968603cf8922a8726f9d8b5d11bfde099deb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ROS-20240704-05
Vulnerability in the OpenSearch software package related to incorrectly restricting reference to an external XML entity. Exploitation of the vulnerability could allow an attacker to conduct XXE attacks...
GHSA-X3M3-4WPV-5VGC vulnerabilities
Vulnerabilities for packages: py3-jupyterhub...
MAL-2024-10196 Malicious code in wdb3 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 40c8cae0ed147f872f69edc3d11e0e1c730e0b1c852e7718f6b5b73e646565b5 --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...
MAL-2024-10145 Malicious code in pytuon (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2e3ed1472f7e9a518421e4785aa8c59d6d5e903903bd8e2304e6cb1f7a7e808b --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: funcaptcha-ru Reasons based on the campaign: - infostealer...
Malicious code in telegram-notifications (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in multi-movingsign (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in get-stats (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in branch-raker (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bitmovin_api (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in alidayu-api (RubyGems)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6146 Malicious code in tiktok8 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in testepassword-generate (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in stake-auto-better (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-6005 Malicious code in shikitesting (PyPI)
--- -= Per source details. Do not edit below this line.=-...