CVE-2023-38831-KQL

CVE-2023-38831 - WinRAR File Extension Spoofing Vulnerability Description Cybercriminals have exploited a vulnerability allowing them to spoof file extensions. This means they can hide the launch of malicious scripts within archives pretending to be common file types such as .jpg, .txt, etc. This...

aiogram-utils (>=0.0.1, <=0.0.3), algorithmic-trader (>=0.0.2, <=0.0.6) +35 more potentially affected by CVE-2026-96749 via pymongo (3.12.0)

pymongo PYPI version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - aiogram-utils =0.0.1, =0.0.2, =1.1.1, =1.0.4, =0.11.0, =0.2.1, =0.4.0, =0.2.2, =0.2.5.5, =0.3.4, =1.0.0, =0.1.0, =1.5.2, =0.1.2, =0.1.14 and more...

quant1x-trader (>=0.7.3, <=0.8.6), secsend-api (>=1.1.0, <=1.1.2) potentially affected by CVE-2026-85078 via sanic (23.12.1)

sanic PYPI version 23.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - quant1x-trader =0.7.3, =1.1.0, =1.1.2 Source cves: CVE-2026-85078 Source advisory: OSV:PYSEC-2026-4162...

Malicious Package

Overview crypto-trader-py is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

MAL-2026-16406 Malicious code in crypto-trader-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e855a3ce62e35b613e702e710b81900769c241707c80f6a61462df0927529c The package presents itself as a crypto trading and backtesting toolkit, but ships no library code matching that description — SOURCES.txt lists only...

Malicious code in crypto-trader-py (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33e855a3ce62e35b613e702e710b81900769c241707c80f6a61462df0927529c The package presents itself as a crypto trading and backtesting toolkit, but ships no library code matching that description — SOURCES.txt lists only...

Malicious Package

Overview crypto-trader-py is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

quant1x-trader (>=0.7.3, <=0.8.6), secsend-api (>=1.1.0, <=1.1.2) potentially affected by CVE-2026-85078 via sanic (23.12.1)

sanic PYPI version 23.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - quant1x-trader =0.7.3, =1.1.0, =1.1.2 Source cves: CVE-2026-85078 Source advisory: OSV:GHSA-WMJ6-G64G-J7Q5...

CVE-2026-85030

A vulnerability has been found in HKUDS AI-Trader up to d03ff6c056b32ced735adf7c19ed8175adb1c8df. The affected element is an unknown function of the file service/server/routesagent.py of the component selfRegister API Endpoint. Such manipulation of the argument initialbalance leads to business...

CVE-2026-85030 HKUDS AI-Trader selfRegister API Endpoint routes_agent.py logic error

A vulnerability has been found in HKUDS AI-Trader up to d03ff6c056b32ced735adf7c19ed8175adb1c8df. The affected element is an unknown function of the file service/server/routesagent.py of the component selfRegister API Endpoint. Such manipulation of the argument initialbalance leads to business...

EUVD-2026-70311

A vulnerability has been found in HKUDS AI-Trader up to d03ff6c056b32ced735adf7c19ed8175adb1c8df. The affected element is an unknown function of the file service/server/routesagent.py of the component selfRegister API Endpoint. Such manipulation of the argument initialbalance leads to business...

CVE-2026-85030

HKUDS AI-Trader (a simulated trading/competition platform) contains a business logic error in the selfRegister API Endpoint within service/server/routes_agent.py. By manipulating the initial_balance argument, a remote attacker can inflate their starting cash/equity value. However, because profit_...

CVE-2026-85030 HKUDS AI-Trader selfRegister API Endpoint routes_agent.py logic error

A vulnerability has been found in HKUDS AI-Trader up to d03ff6c056b32ced735adf7c19ed8175adb1c8df. The affected element is an unknown function of the file service/server/routesagent.py of the component selfRegister API Endpoint. Such manipulation of the argument initialbalance leads to business...

CVE-2026-85030 HKUDS AI-Trader selfRegister API Endpoint routes_agent.py logic error

A vulnerability has been found in HKUDS AI-Trader up to d03ff6c056b32ced735adf7c19ed8175adb1c8df. The affected element is an unknown function of the file service/server/routesagent.py of the component selfRegister API Endpoint. Such manipulation of the argument initialbalance leads to business...

CVE-2026-85030: Undefined Security Weakness

A vulnerability has been found in HKUDS AI-Trader up to d03ff6c056b32ced735adf7c19ed8175adb1c8df. The affected element is an unknown function of the file service/server/routesagent.py of the component selfRegister API Endpoint. Such manipulation of the argument initialbalance leads to business...

PT-2026-84912

A vulnerability has been found in HKUDS AI-Trader up to d03ff6c056b32ced735adf7c19ed8175adb1c8df. The affected element is an unknown function of the file service/server/routes agent.py of the component selfRegister API Endpoint. Such manipulation of the argument initial balance leads to business...

Malicious code in prediction-trader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da26a91c3cc6d5bf4957fa3f713a63e579b820c40b57b24209df61b2a53d7e87 index.js contacts a hardcoded bare-IP endpoint at 31.97.137.157:45000/icons/108 disguised as an icon/CDN fetch variables named iconDomain/getPlugin,...

MAL-2026-13959 Malicious code in prediction-trader (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da26a91c3cc6d5bf4957fa3f713a63e579b820c40b57b24209df61b2a53d7e87 index.js contacts a hardcoded bare-IP endpoint at 31.97.137.157:45000/icons/108 disguised as an icon/CDN fetch variables named iconDomain/getPlugin,...

Malicious Package

Overview prediction-trader is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

EUVD-2026-54559

A vulnerability was identified in WonderTrader up to 0.9.9. Affected is the function undoneqty in the library src/WtCore/TraderAdapter.h of the component Pending Order Handler. The manipulation of the argument getUndoneQty leads to enforcement of behavioral workflow. The attack is possible to be...