45 matches found
MAL-2025-6461 Malicious code in bavard-ml-common (PyPI)
--- -= Per source details. Do not edit below this line.=-...
PT-2025-30664
Name of the Vulnerable Software and Affected Versions Bayraktar Solar Energies ScadaWatt Otopilot versions prior to 27.05.2025 Description A SQL Injection issue exists in Bayraktar Solar Energies ScadaWatt Otopilot. The vulnerability is due to improper neutralization of special elements used in a...
PT-2025-27160 · WordPress · Wp Edit
Name of the Vulnerable Software and Affected Versions: WP Edit versions 4.0.4 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Stored XSS. This means that an attacker can inject malicious...
MAL-2025-6596 Malicious code in sqiul83 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 67d309c2d4c740426c07cc17768f6313eebd765242e7e4a63aa04213d21358ea During installation of the source package, it attempts to silently download and start a remote executable. At the time of analysis, the downloading link did no...
MAL-2025-6524 Malicious code in initer (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d2aac1e40660cbe4323a93d03087f3b9a2d596a5dcfcf2bae3cb0a2ab37cf646 File is designed to download, hide under system-like name, and run a remote executable, widely identified as malicious. --- Category: MALICIOUS - The campaign...
CGA-2R95-88F8-3H79
Bulletin has no description...
CVE-2025-22870 vulnerabilities
Vulnerabilities for packages: q, k9s, google-guest-agent, envoy-gateway-fips, mongo-tools, crossplane-provider-sql-fips, aws-application-networking-k8s, gptscript, kyverno-policy-reporter-kyverno-plugin-fips, secrets-store-csi-driver-provider-gcp-fips, crossplane, kubernetes-dns-node-cache,...
CVE-2025-0475 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
An issue has been discovered in GitLab CE/EE affecting all versions from 15.10 prior to 17.7.6, 17.8 prior to 17.8.4, and 17.9 prior to 17.9.1. A proxy feature could potentially allow unintended content rendering leading to XSS under specific circumstances...
CVE-2022-49065
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Fix the svcdeferredevent trace class Fix a NULL deref crash that occurs when an svcrqst is deferred while the sunrpc tracing subsystem is enabled. svcrevisit sets dr-xprt to NULL, so it can't be relied upon in the...
GHSA-MF63-R9WM-8Q2M vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2025-0840
A vulnerability, which was classified as problematic, was found in GNU Binutils up to 2.43. This affects the function disassemblebytes of the file binutils/objdump.c. The manipulation of the argument buf leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The...
CVE-2024-12570 vulnerabilities
Vulnerabilities for packages: gitlab-cng-fips...
CVE-2024-11114 vulnerabilities
Vulnerabilities for packages: chromium...
MAL-2025-5132 Malicious code in saml-helper (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2b054dba9521b1260174fa01f3f7ba51d88bd51e53c481675ed967271304a63f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
CVE-2024-6293 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2022-21351 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2020-14791 vulnerabilities
Vulnerabilities for packages: mysql...
CVE-2019-3018 vulnerabilities
Vulnerabilities for packages: mysql...