Lucene search
+L

139 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/12/15 3:24 p.m.•20 views

Malicious code in smtblib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15a295f1d98fcbbdd6a077bc3a849966ca3f73919c0d47e58948ff382481e5b6 Malicious copy of a standard library module that during class initialization downloads and executes remote code and after that attempts to cover its tracks by...

7.6AI score
SaveExploits0References2
OSV
OSV
•added 2025/12/15 3:24 p.m.•17 views

MAL-2025-192579 Malicious code in smtblib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15a295f1d98fcbbdd6a077bc3a849966ca3f73919c0d47e58948ff382481e5b6 Malicious copy of a standard library module that during class initialization downloads and executes remote code and after that attempts to cover its tracks by...

7.5AI score
SaveExploits0References2
OSV
OSV
•added 2025/12/09 4:32 p.m.•13 views

MAL-2025-192391 Malicious code in bignum (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 251c8009e3a70f8c3a3a8283dc7f2b603838ec892d7773f0b4886122ff0d97c5 In this incarnation, the package is no longer a clone of networkx, but continues to use the same technique to run secretly remote code and cover tracks ---...

7.5AI score
SaveExploits0References2
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2008-1027

Malware in sbrugna...

6.8CVSS6.3AI score0.04015EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•18 views

EUVD-2011-1671

Malware in sbrugna...

4.3CVSS6.4AI score0.01973EPSS
SaveExploits2References10
SUSE CVE
SUSE CVE
•added 2024/12/13 12:30 a.m.•9 views

SUSE CVE-2024-47603

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gstmatroskademuxupdatetracks function within matroska-demux.c. The vulnerability occurs when the gstcapsisequal function is called with invalid caps...

5.5CVSS6.9AI score0.00873EPSS
SaveExploits0References10
OSV
OSV
•added 2024/12/12 2:03 a.m.•13 views

AZL-62378 CVE-2024-47603 affecting package gstreamer1 1.20.0-2

GStreamer is a library for constructing graphs of media-handling components. A null pointer dereference vulnerability has been discovered in the gstmatroskademuxupdatetracks function within matroska-demux.c. The vulnerability occurs when the gstcapsisequal function is called with invalid caps...

7.5CVSS6.1AI score0.00873EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/12/11 12:00 a.m.•6 views

GStreamer 代码问题漏洞

GStreamer is an open source set of frameworks for processing streaming media from GStreamer. A code issue vulnerability exists in GStreamer that stems from a null pointer dereference vulnerability found in the gstmatroskademuxupdatetracks function in matroska-demux.c. The vulnerability is caused ...

7.5CVSS6.1AI score0.00873EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2024/09/30 12:00 a.m.•27 views

The vulnerabilities of the functions cgi_create_playlist() and cgi_get_tracks_list() (/cgi-bin/MyMusic.cgi) in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05, and DNS-1550-04 allow a malicious individual to execute arbitrary commands.

The vulnerabilities of the functions cgicreateplaylist and cgigettrackslist /cgi-bin/MyMusic.cgi in the microprogramming software of D-Link devices such as DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343...

9CVSS7.3AI score0.19464EPSS
SaveExploits1References7
OSV
OSV
•added 2024/08/30 3:15 p.m.•15 views

CVE-2024-8339

A vulnerability was found in SourceCodester Electric Billing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?page=tracks of the component Connection Code Handler. The manipulation of the argument code leads to sql injection...

9.8CVSS5.8AI score0.0062EPSS
SaveExploits1References5
NVD
NVD
•added 2024/08/30 3:15 p.m.•49 views

CVE-2024-8339

A vulnerability was found in SourceCodester Electric Billing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?page=tracks of the component Connection Code Handler. The manipulation of the argument code leads to sql injection...

9.8CVSS0.0062EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2024/08/30 12:00 a.m.•15 views

SourceCodester Electric Billing Management System SQL注入漏洞

SourceCodester Electric Billing Management System is a SourceCodester open source electric billing management system. A SQL injection vulnerability exists in SourceCodester Electric Billing Management System version 1.0, which originates from an SQL injection vulnerability in the code parameter o...

9.8CVSS7.1AI score0.0062EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2024/08/30 12:00 a.m.•14 views

PT-2024-38954 · Sourcecodester · Sourcecodester Electric Billing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Electric Billing Management System version 1.0 Description: A critical issue affects some unknown functionality of the file "/?page=tracks" of the component Connection Code Handler. The manipulation of the code argument leads t...

9.8CVSS8.2AI score0.0062EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/30 12:00 a.m.•4 views

CVE-2024-8339: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Electric Billing Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /?page=tracks of the component Connection Code Handler. The manipulation of the argument code leads to sql injection...

9.8CVSS6.4AI score0.0062EPSS
SaveExploits1References1
NVD
NVD
•added 2024/07/26 3:15 p.m.•23 views

CVE-2024-41805

Tracks, a Getting Things Done GTD web application, is vulnerable to reflected cross-site scripting in versions prior to 2.7.1. Reflected cross-site scripting enables execution of malicious JavaScript in the context of a user’s browser if that user clicks on a malicious link, allowing phishing...

6.1CVSS0.00404EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/07/26 2:51 p.m.•37 views

CVE-2024-41805 Tracks vulnerable to reflected cross-site scripting

Tracks, a Getting Things Done GTD web application, is vulnerable to reflected cross-site scripting in versions prior to 2.7.1. Reflected cross-site scripting enables execution of malicious JavaScript in the context of a user’s browser if that user clicks on a malicious link, allowing phishing...

6.1CVSS0.00404EPSS
SaveExploits0References4
CVE
CVE
•added 2024/07/26 2:51 p.m.•70 views

CVE-2024-41805

Tracks (Getting Things Done web app) is vulnerable to reflected cross-site scripting in versions prior to 2.7.1. The vulnerability occurs when a user clicks a malicious link, enabling execution of JavaScript in the browser and potential credential theft via phishing. Tracks 2.7.1 patches the issu...

6.1CVSS6AI score0.00404EPSS
SaveExploits0References4
Mend
Mend
•added 2024/07/26 2:51 p.m.•2 views

CVE-2024-41805

Tracks, a Getting Things Done GTD web application, is vulnerable to reflected cross-site scripting in versions prior to 2.7.1. Reflected cross-site scripting enables execution of malicious JavaScript in the context of a user’s browser if that user clicks on a malicious link, allowing phishing...

6.1CVSS0.00404EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2024/07/26 2:51 p.m.•15 views

CVE-2024-41805 Tracks vulnerable to reflected cross-site scripting

Tracks, a Getting Things Done GTD web application, is vulnerable to reflected cross-site scripting in versions prior to 2.7.1. Reflected cross-site scripting enables execution of malicious JavaScript in the context of a user’s browser if that user clicks on a malicious link, allowing phishing...

6.1CVSS6.2AI score0.00404EPSS
SaveExploits0References4
OSV
OSV
•added 2024/07/26 2:51 p.m.•21 views

CVE-2024-41805 Tracks vulnerable to reflected cross-site scripting

Tracks, a Getting Things Done GTD web application, is vulnerable to reflected cross-site scripting in versions prior to 2.7.1. Reflected cross-site scripting enables execution of malicious JavaScript in the context of a user’s browser if that user clicks on a malicious link, allowing phishing...

6.1CVSS6.2AI score
SaveExploits0References6
Rows per page
Query Builder