Lucene search
K

358 matches found

RedhatCVE
RedhatCVE
added 2025/09/19 12:31 p.m.6 views

CVE-2025-10157

A Protection Mechanism Failure vulnerability in mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass the unsafe globals check. This is possible because the scanner performs an exact match for module names, allowing malicious payloads to be loaded via...

9.3CVSS6.7AI score0.00265EPSS
Exploits1References1
OSV
OSV
added 2025/09/17 12:30 p.m.2 views

GHSA-HF6H-9WQ7-HMJG Duplicate Advisory: Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f7qq-56ww-84cr. This link is maintained to preserve external references. Original Description A Protection Mechanism Failure vulnerability in mmaitre314 picklescan versions up to and including 0.0.30 allows a...

9.3CVSS6.9AI score0.00265EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2025/09/17 12:30 p.m.9 views

Duplicate Advisory: Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-f7qq-56ww-84cr. This link is maintained to preserve external references. Original Description A Protection Mechanism Failure vulnerability in mmaitre314 picklescan versions up to and including 0.0.30 allows a...

9.3CVSS6.9AI score0.00265EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2025/09/17 12:15 p.m.7 views

CVE-2025-10157

A Protection Mechanism Failure vulnerability in mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass the unsafe globals check. This is possible because the scanner performs an exact match for module names, allowing malicious payloads to be loaded via...

7.8CVSS6.9AI score
Exploits0References3
NVD
NVD
added 2025/09/17 12:15 p.m.1 views

CVE-2025-10157

A Protection Mechanism Failure vulnerability in mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass the unsafe globals check. This is possible because the scanner performs an exact match for module names, allowing malicious payloads to be loaded via...

9.3CVSS0.00265EPSS
Exploits1References3
PyPA
PyPA
added 2025/09/17 12:15 p.m.7 views

PYSEC-2025-153

A Protection Mechanism Failure vulnerability in mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass the unsafe globals check. This is possible because the scanner performs an exact match for module names, allowing malicious payloads to be loaded via...

9.3CVSS7.5AI score0.00265EPSS
Exploits1References3Affected Software1
CVE
CVE
added 2025/09/17 11:33 a.m.16 views

CVE-2025-10157

CVE-2025-10157 affects mmaitre314’s Picklescan up to version 0.0.30, describing a protection-mechanism failure that bypasses the unsafe-globals check by loading malicious payloads through submodules of dangerous packages (e.g., asyncio.unix_events). Exploitation could lead to arbitrary code execu...

9.3CVSS6.5AI score0.00265EPSS
Exploits1References3Affected Software1
Vulnrichment
Vulnrichment
added 2025/09/17 11:33 a.m.4 views

CVE-2025-10157 PickleScan Bypasses Unsafe Globals Check Using Submodule Imports

A Protection Mechanism Failure vulnerability in mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass the unsafe globals check. This is possible because the scanner performs an exact match for module names, allowing malicious payloads to be loaded via...

9.3CVSS6.5AI score0.00265EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/09/17 11:33 a.m.7 views

CVE-2025-10157 PickleScan Bypasses Unsafe Globals Check Using Submodule Imports

A Protection Mechanism Failure vulnerability in mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass the unsafe globals check. This is possible because the scanner performs an exact match for module names, allowing malicious payloads to be loaded via...

9.3CVSS0.00265EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/09/16 4:11 p.m.4 views

CVE-2023-53316 drm/msm/dp: Free resources after unregistering them

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: Free resources after unregistering them The DP component's unbind operation walks through the submodules to unregister and clean things up. But if the unbind happens because the DP controller itself is being removed,...

0.00022EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.1 views

EulerOS 2.0 SP12 : git (EulerOS-SA-2025-2004)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...

8CVSS8AI score0.00603EPSS
Exploits9References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

EulerOS 2.0 SP12 : git (EulerOS-SA-2025-2035)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...

8CVSS8AI score0.00603EPSS
Exploits9References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.1 views

EulerOS 2.0 SP10 : git (EulerOS-SA-2025-2093)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...

8CVSS8AI score0.00603EPSS
Exploits9References2
Tenable Nessus
Tenable Nessus
added 2025/09/10 12:0 a.m.2 views

EulerOS 2.0 SP10 : git (EulerOS-SA-2025-2065)

According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full...

8CVSS8AI score0.00603EPSS
Exploits9References2
GithubExploit
GithubExploit
added 2025/08/29 11:48 a.m.165 views

Exploit for Link Following in Git-Scm Git

CVE-2025-48384: Breaking git with a carriage return and clonin...

8CVSS7.2AI score0.00603EPSS
Exploits9
VulnCheck KEV
VulnCheck KEV
added 2025/08/25 12:0 a.m.2 views

VulnCheck KEV: CVE-2025-48384

Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed CRLF. When writing a config entry, values with ...

8CVSS5.8AI score0.00603EPSS
In wildExploits9References8
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2022-3514

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue has been discovered in GitLab CE/EE affecting all versions starting from 6.6 before 15.5.7, all versions starting from 15.6 before 15.6.4, all versions...

5.3CVSS5.5AI score0.00338EPSS
Exploits0References2
Gitee
Gitee
added 2025/08/16 8:41 p.m.116 views

Exploit for CVE-2023-1234

It is an offensive tool for SSH exploitation. The repository contains a proof of concept PoC exploit for CVE-2023-1234, which targets vulnerable proxycommand configurations on SSH clients. The target product/service is OpenBSD's SSH, and the vulnerability class/vector is remote command execution...

4.3CVSS8AI score0.00375EPSS
Exploits7
Tenable Nessus
Tenable Nessus
added 2025/08/15 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-48384

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to...

8CVSS7.8AI score0.00603EPSS
Exploits9References2
Drupal
Drupal
added 2025/08/13 12:0 a.m.20 views

Layout Builder Advanced Permissions - Moderately critical - Access bypass - SA-CONTRIB-2025-097

The Layout Builder Advanced Permissions module enables you to have fine grained control over who can do what in editing pages built with Layout Builder. The module doesn't sufficiently control access for adding sections in the submodule. This vulnerability is mitigated by the fact that an attacke...

4.3CVSS6.9AI score0.00055EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder