CVE-2024-33854

creationtimestamp| type| source ---|---|--- 2024-08-23 19:38:59+00:00| seen| https://t.me/cvedetector/4033...

CVE-2023-52898

In the Linux kernel, the following vulnerability has been resolved: xhci: Fix null pointer dereference when host dies Make sure xhcifreedev and xhcikillendpointurbs do not race and cause null pointer dereference when host suddenly dies. Usb core may call xhcifreedev which frees the xhci-devssloti...

Detecting AWS Account Compromise: Key Indicators in CloudTrail Logs for Stolen API Keys

As cloud infrastructure becomes the backbone of modern enterprises, ensuring the security of these environments is paramount. With AWS Amazon Web Services still being the dominant cloud it is important for any security professional to know where to look for signs of compromise. AWS CloudTrail...

CVE-2024-23729

The ColorOS Internet Browser com.heytap.browser application 45.10.3.4.1 for Android allows a remote attacker to execute arbitrary JavaScript code via the com.android.browser.RealBrowserActivity component...

The State of Ransomware

Palo Alto Networks published its semi-annual report on ransomware. From the Executive Summary: Unit 42 monitors ransomware and extortion leak sites closely to keep tabs on threat activity. We reviewed compromise announcements from 53 dedicated leak sites in the first half of 2024 and found 1,762...

Identity Threat Detection and Response Solution Guide

The Emergence of Identity Threat Detection and Response Identity Threat Detection and Response ITDR has emerged as a critical component to effectively detect and respond to identity-based attacks. Threat actors have shown their ability to compromise the identity infrastructure and move laterally...

Malicious code in artifact-lab-3-package-7e532784 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d93531e3b6c6c54a9029303ec3f20394fe8268775978e1b13754c318486c88cc Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8047 Malicious code in artifact-lab-3-package-6e10193e (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 be1776005a138f3a3c26df212fd9407dda2bb99a246703710810d30e6118ed79 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-10473 Malicious code in artifact-lab-3-package-02f73e0e (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ce38f402ec2ebebcc95e82007ff5807caab91173d1823fe9aa89db982083701e Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-10541 Malicious code in artifact-lab-3-package-736f752d (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dfb249857a1fcf0c79636d8692dc8b148d847336022dbe6f4ab558f6f5c2f97f Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8048 Malicious code in artifact-lab-3-package-76a351f5 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ffd940df08afab8ca93f472de627c4cc633b5de2d3331b58a84602a882390ac1 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8017 Malicious code in artifact-lab-3-package-392c6acd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ada0f9ebcf3f190d513b34099887d36ad38579e9c5b5d2004a8f0bff5565e100 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8016 Malicious code in artifact-lab-3-package-f0727516 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4eda9e6e52c2a5a96b0b7053fcd9c738d037bc9a0c86b1a2bd7c74336691b958 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8045 Malicious code in artifact-lab-3-package-ccd28738 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5da429dcc2bd3c0de786f149b4b510b2aebb23e894f5eaea3f80812b8241dd6a Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in lab-3-package-438d82fc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1647151de9ec3b78d6f3b3c4dc4bfe1f7b27f9c1ffdb56d482daa533fd2b1ec3 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in artifact-lab-3-package-b55680cd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 be4896eebe0a6b7185d165cec1e593faea8a14a8b2386711ef9c08657273bb31 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8011 Malicious code in postman-open-technologies-knowledge-base-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a0f1159812781f3847a9da7e6b4455cd3f3ee8bd00da0eddbe589dd52d1d56e8 The OpenSSF Package Analysis project identified 'postman-open-technologies-knowledge-base-api' @ 1.2.3 npm as malicious. It is considered...

CVE-2024-7348

creationtimestamp| type| source ---|---|--- 2024-08-08 16:24:06+00:00| seen| https://t.me/cvedetector/2789 2024-08-13 09:33:03+00:00| published-proof-of-concept| https://t.me/HackingInsights/9642 2024-08-13 19:07:22+00:00| exploited| https://t.me/truesecator/6089 2025-07-31 22:17:50+00:00| seen|...

Malicious code in igen-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 1466603860464da54a294afe059b81e39290c19fcf8bfedaca8101cda9d63c76 The OpenSSF Package Analysis project identified 'igen-ui' @ 99.9.9 npm as malicious. It is considered malicious because: - The package...

MAL-2024-7906 Malicious code in @adidas-data-mesh/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cb712751b93462e59fe5e04bbcb56626dfb03735b8179b69e4a1f56a60c1375 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...