Lucene search
+L

139 matches found

OSV
OSV
added 2018/11/01 2:47 p.m.24 views

GHSA-RWG6-3FMJ-W4WX tkinter is malware

The tkinter package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real security concern...

7.5CVSS7.6AI score0.01111EPSS
SaveExploits0References2
Cent OS
Cent OS
added 2018/07/13 4:28 p.m.401 views

python, tkinter security update

CentOS Errata and Security Advisory CESA-2018:2123 An update for python is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

7.5CVSS6.6AI score0.95707EPSS
SaveExploits7References7
OpenVAS
OpenVAS
added 2018/06/12 12:0 a.m.77 views

Malicious JavaScript Package Detection

Detection and reporting of known malicious JavaScript packages or package versions. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

10CVSS7.4AI score0.02342EPSS
SaveExploits4References108
CNVD
CNVD
added 2018/05/31 12:0 a.m.5 views

node-tkinter information disclosure vulnerability

node-tkinter is a malware that steals environment variables and sends them to attackers. A security vulnerability exists in node-tkinter. An attacker can use this vulnerability to steal environment variables and send them to an address under the attacker's control...

7.5CVSS7.6AI score0.01083EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/05/31 12:0 a.m.4 views

tkinter Information Disclosure Vulnerability

tkinter is a malware that steals environment variables and sends them to attackers. A security vulnerability exists in tkinter. An attacker can exploit the vulnerability to steal environment variables and send them to an address under the attacker's control...

7.5CVSS7.6AI score0.01111EPSS
SaveExploits0References1
Veracode
Veracode
added 2018/05/30 5:56 a.m.23 views

Malicious Typo-Squatting

The node-tkinter packages is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake them for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01083EPSS
SaveExploits0References1Affected Software1
Veracode
Veracode
added 2018/05/30 5:41 a.m.20 views

Malicious Typo-Squatting

The tkinter packages is a malicious typo-squatting package. The package uses a similar name to the original library so that developers may mistake them for the real one but have malicious actions under the hood such as stealing environment variables...

7.5CVSS7.4AI score0.01111EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2018/05/29 8:29 p.m.27 views

CVE-2017-16061

tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

7.5CVSS7.5AI score0.01111EPSS
SaveExploits0References1
Prion
Prion
added 2018/05/29 8:29 p.m.13 views

Code injection

node-tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

5CVSS7.4AI score0.01083EPSS
SaveExploits0References1
Prion
Prion
added 2018/05/29 8:29 p.m.19 views

Code injection

tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

5CVSS7.4AI score0.01111EPSS
SaveExploits0References1
CVE
CVE
added 2018/05/29 8:0 p.m.54 views

CVE-2017-16062

CVE-2017-16062 relates to the npm package node-tkinter, which is described as malware that steals environment variables and sends them to attacker-controlled locations. The package has been unpublished from the npm registry. Practical impact stated across sources is the exposure of environment va...

7.5CVSS7.4AI score0.01083EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2018/05/29 8:0 p.m.57 views

CVE-2017-16061

The CVE refers to the npm package named tkinter, described as malware that steals environment variables and exfiltrates them to attacker-controlled locations. All versions have been unpublished from the npm registry. The MITRE-style impact is primarily confidentiality loss, with practical risk th...

7.5CVSS7.4AI score0.01111EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2018/05/29 8:0 p.m.23 views

CVE-2017-16062

node-tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

7.5AI score0.01083EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/05/29 8:0 p.m.26 views

CVE-2017-16061

tkinter was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm...

7.5AI score0.01111EPSS
SaveExploits0References1
Fedora
Fedora
added 2018/04/06 11:10 a.m.45 views

[SECURITY] Fedora 28 Update: python3-3.6.5-1.fc28

Python is an accessible, high-level, dynamically typed, interpreted program ming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3 package provides the "python3" executable: the...

7.5CVSS2.1AI score0.05287EPSS
SaveExploits1
Kitploit
Kitploit
added 2018/02/18 1:22 p.m.20 views

PcapXray - A Network Forensics Tool To visualize a Packet Capture offline as a Network Diagram

PcapXray is a Network Forensics Tool To visualize a Packet Capture offline as a Network Diagram including device identification, highlight important communication and file extraction. PcapXray Design Specification Goal: Given a Pcap File, plot a network diagram displaying hosts in the network,...

6.6AI score
SaveExploits0References1
Cent OS
Cent OS
added 2017/08/24 1:40 a.m.98 views

python, tkinter security update

CentOS Errata and Security Advisory CESA-2017:1868 An update for python is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

5.8CVSS6.6AI score0.03121EPSS
SaveExploits1References7
nodejs
nodejs
added 2017/08/08 10:24 p.m.36 views

Hijacked Environment Variables

Overview The node-tkinter package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real...

5CVSS4.7AI score0.01083EPSS
SaveExploits0Affected Software1
nodejs
nodejs
added 2017/08/08 10:21 p.m.38 views

Hijacked Environment Variables

Overview The tkinter package is a piece of malware that steals environment variables and sends them to attacker controlled locations. All versions have been unpublished from the npm registry. Recommendation As this package is malware, if you find it installed in your environment, the real securit...

5CVSS4.6AI score0.01111EPSS
SaveExploits0Affected Software1
Cent OS
Cent OS
added 2016/11/25 3:43 p.m.74 views

python, tkinter security update

CentOS Errata and Security Advisory CESA-2016:2586 An update for python is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

10CVSS6.9AI score0.26316EPSS
SaveExploits1References7
Rows per page
Query Builder