9 matches found
artd-channels (>=1.0.2, <=1.0.11), botbuilder-applicationinsights (>=4.16.2, <=4.17.1) +6 more potentially affected by CVE-2026-53878 via django (4.2.15)
django PYPI version 4.2.15 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - artd-channels =1.0.2, =4.16.2, =4.8.0, =6.0.16, =0.4.0, =0.6.2 Source cves: CVE-2026-53878 Source advisory: OSV:GHSA-8QCX-XF44-272X...
admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +150 more potentially affected by CVE-2026-33033 via django (>=4.2.0, <=4.2.29)
django PYPI version =4.2.0, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =0.0.1, =4.16.2, =4.17.1 and more Source cves: CVE-2026-33033 Source advisory: OSV:PYSEC-2026-48...
admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +150 more potentially affected by CVE-2026-1207 via django (>=4.2.0a1, <=4.2.27)
django PYPI version =4.2.0a1, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =0.0.1, =4.16.2, =4.17.1 and more Source cves: CVE-2026-1207 Source advisory: MEND:CVE-2026-1207...
Code injection
180solutions Zango downloads "required Adware components" without checking integrity or authenticity, which might allow context-dependent attackers to execute arbitrary code by subverting the DNS resolution of static.zangocash.com...
CVE-2006-2324
The CVE-2006-2324 entry concerns 180solutions Zango adware that downloads “required Adware components” without integrity/authenticity checks, enabling a context-dependent attacker to execute arbitrary code by subverting DNS resolution of static.zangocash.com. The core issue is a lack of verificat...
CVE-2006-2324
180solutions Zango downloads "required Adware components" without checking integrity or authenticity, which might allow context-dependent attackers to execute arbitrary code by subverting the DNS resolution of static.zangocash.com...
CVE-2006-2324: Undefined Security Weakness
180solutions Zango downloads "required Adware components" without checking integrity or authenticity, which might allow context-dependent attackers to execute arbitrary code by subverting the DNS resolution of static.zangocash.com...
[Full-disclosure] [TZO-042006] Insecure Auto-Update and File execution
Zango Adware - Insecure Auto-Update and File execution Reference : TZO-042006-Zango Author : Thierry Zoller Advisory : http://secdev.zoller.lu/research/zango.htm Shameless Plug : I would like to take the opportunity to invite you to the Security Conference known as "Hack.lu 2006" in the Grand-Duc...