8101 matches found
PYSEC-2022-43172
The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...
PYSEC-2022-43164
The Rondolu-YT-Concate package in PyPI v0.1.0 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...
PYSEC-2022-43132
The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...
GHSA-6J88-6WHG-X687 Cross-site Scripting in Apache Tomcat
In Apache Tomcat 10.1.0-M1 to 10.1.0-M16, 10.0.0-M1 to 10.0.22, 9.0.30 to 9.0.64 and 8.5.50 to 8.5.81 the Form authentication example in the examples web application displayed user provided data without filtering, exposing a XSS vulnerability...
AAmiles security vulnerability
AAmiles is a machine learning project scanner. AAmiles suffers from a security vulnerability. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...
RootInteractive security vulnerabilities
RootInteractive is an individual developer's code for interactively visualizing multidimensional data in ROOT or native Python format Panda, numpy. A security vulnerability exists in the RootInteractive package in PyPI versions v0.0.5 through v0.0.19b0. An attacker exploited the vulnerability to...
Zibal security vulnerabilities
Zibal is the Zibal payment gateway. A security vulnerability exists in Zibal. An attacker could exploit the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...
Beginner Security Vulnerabilities
Beginner is a handy code package for Python beginners. A security vulnerability exists in Beginner. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...
Sixfab security vulnerabilities
Sixfab is a pip package for individual developers. A security vulnerability exists in the Sixfab-Tool package in PyPI versions v0.0.2 through v0.0.3. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...
AAmiles security vulnerability
AAmiles is a machine learning project scanner. AAmiles suffers from a security vulnerability. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...
Togglee security vulnerabilities
Togglee is a simple library for separating feature deployment from release time. A security vulnerability exists in Togglee. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...
drxhello security vulnerability
drxhello is a pip package for individual developers. A security vulnerability exists in the PyPI v0.0.1 version of the drxhello package. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...
KGExplore security vulnerabilities
KGExplore is a publicly available knowledge graph exploration project for individual developers. A security vulnerability exists in the KGExplore package for PyPI versions v0.1.1 through v0.1.2. An attacker exploited the vulnerability to access sensitive user information and digital currency keys...
Flaws in Smart Jacuzzi App Could Be Exploited To Extract Users’ Data
By Deeba Ahmed The vulnerability existed in Jacuzzi Brand LLC’s SmartTub app web interface that could reveal users private data to… This is a post from HackRead.com Read the original post: Flaws in Smart Jacuzzi App Could Be Exploited To Extract Users Data...
Recipes Cross-Site Scripting Vulnerability (CNVD-2022-58298)
Recipes are apps for managing recipes, planning meals, creating shopping lists, and more. A cross-site scripting vulnerability exists in Recipes versions 1.0.5 through 1.2.5, which stems from a filtered escape of user data missing from the name parameter. A low-privileged attacker can exploit thi...
Recipes Cross-Site Scripting Vulnerability (CNVD-2022-58299)
Recipes are apps for managing recipes, planning meals, creating shopping lists, and more. A cross-site scripting vulnerability exists in Recipes versions 1.0.5 through 1.2.5, which stems from a filtered escape of user data missing from the name parameter. A low-privileged attacker can exploit thi...
IBM Robotic Process Automation information leakage vulnerability
IBM Robotic Process Automation is a robotic process automation product from IBM USA. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. IBM Robotic Process Automation suffers from an information disclosure vulnerability that stems from...
CVE-2022-30229
A vulnerability has been identified in SICAM GridEdge Classic All versions V2.6.6. The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of a user, such as credentials, in case that user's id is known...
