Malicious code in connector-bsb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: oracle-using-macaron eed0770278358269212ff3971e9c4ee9d5410676ea27a4feb6ae52fa8cb5484b This package seems to be part of a larger malicious toolkit designed for unauthorized access to systems, data theft, and potentially acting as a...

CODESYS Runtime Toolkit 安全漏洞

CODESYS Runtime Toolkit is a comprehensive software development kit for programmable controllers from CODESYS, Germany. It is used to convert embedded platforms or industrial PCs into controllers and supports secondary development. A security vulnerability exists in CODESYS Runtime Toolkit versio...

WordPress WPMasterToolKit 1.13.1 Shell Upload

WordPress WPMasterToolKit plugin versions 1.13.1 and below remote shell upload exploit...

raptor2 security update

An update is available for raptor2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Raptor is the RDF Parser Toolkit for Redland that provides a set of standalon...

RLSA-2025:0312 Important: raptor2 security update

Raptor is the RDF Parser Toolkit for Redland that provides a set of standalone RDF parsers, generating triples from RDF/XML or N-Triples. Security Fixes: raptor: integer underflow when normalizing a URI with the turtle parser CVE-2024-57823 For more details about the security issues, including th...

Security Bulletin: Vulnerability in Natural Language Toolkit (NLTK) affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component.

Summary Potential vulnerability in Natural Language Toolkit NLTK has been identified that affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge - Assistant Builder Component. The vulnerability have been addressed. Refer to details for additional...

SUSE CVE-2025-2357

A vulnerability was found in DCMTK 3.6.9. It has been declared as critical. This vulnerability affects unknown code of the component dcmjpls JPEG-LS Decoder. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

UBUNTU-CVE-2025-2368

A vulnerability was found in WebAssembly wabt 1.0.36 and classified as critical. This issue affects the function wabt::interp::anonymous namespace::BinaryReaderInterp::OnExport of the file wabt/src/interp/binary-reader-interp.cc of the component Malformed File Handler. The manipulation leads to...

UBUNTU-CVE-2025-2357

A vulnerability was found in DCMTK 3.6.9. It has been declared as critical. This vulnerability affects unknown code of the component dcmjpls JPEG-LS Decoder. The manipulation leads to memory corruption. The attack can be initiated remotely. The exploit has been disclosed to the public and may be...

WABT 安全漏洞

WABT is a WebAssembly binary toolkit open-sourced by WebAssembly. A security vulnerability exists in WABT version 1.0.36, which stems from a heap buffer overflow that could allow a remote attacker to execute arbitrary code...

DCMTK 缓冲区错误漏洞

DCMTK is a collection of libraries and applications that implement most of the DICOM standards from the DCMTK open source. Software for examining, building, and converting DICOM image files, processing offline media, sending and receiving images over a network connection, and demonstrating image...

The vulnerability of the Intel Integrated Performance Primitives library in the Intel oneAPI Base Toolkit development tools, related to an uncontrolled search path element, allows attackers to exploit their privileges.

The vulnerability of the Intel Integrated Performance Primitives library in the Intel oneAPI Base Toolkit development tools set is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow attackers to enhance their privileges...

The vulnerability of the design and analysis tools for developing efficient Intel Advisor code, as well as the Intel oneAPI Base Toolkit, related to insufficient access control mechanisms, allows attackers to exploit these vulnerabilities to enhance their privileges.

The vulnerability of the design and analysis tools for developing efficient Intel Advisor code, as well as the Intel oneAPI Base Toolkit, is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

[SECURITY] Fedora 42 Update: ctk-2023.07.13-5.fc42

The Common Toolkit is a community effort to provide support code for medical image analysis, surgical navigation, and related projects. This package contains the CTK Core library...

The vulnerability of the Intel VTune Profiler performance analyzer and the Intel oneAPI Base Toolkit software development tools is related to an uncontrolled element in the search process, allowing attackers to exploit their privileges.

The vulnerability of the Intel VTune Profiler performance analyzer and the Intel oneAPI Base Toolkit software development tools is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

Exploit for CVE-2025-28915

CVE-2025-28915 Vulnerability Description: WordPress is a bl...

CVE-2025-28915

Unrestricted Upload of File with Dangerous Type vulnerability in Theme Egg ThemeEgg ToolKit themeegg-toolkit allows Upload a Web Shell to a Web Server.This issue affects ThemeEgg ToolKit: from n/a through = 1.2.9...

CVE-2025-23359 affecting package nvidia-container-toolkit for versions less than 1.17.4-1

CVE-2025-23359 affecting package nvidia-container-toolkit for versions less than 1.17.4-1. An upgraded version of the package is available that resolves this issue...

WordPress ThemeEgg ToolKit 1.2.9 Shell Upload Exploit

import argparse import re import time import requests from bs4 import BeautifulSoup by Nxploit | Khaled Alenazi requests.packages.urllib3.disablewarnings session = requests.Session session.verify = False def displaybanner: banner = """...

BasicSR 安全漏洞

BasicSR is an open source image and video recovery toolkit from XPixelGroup Open Source. A security vulnerability exists in XPixelGroup BasicSR 1.4.2 and earlier versions that stems from a vulnerability that could allow native code execution under certain circumstances...