SUSE CVE-2019-11718

Activity Stream can display content from sent from the Snippet Service website. This content is written to innerHTML on the Activity Stream page without sanitization, allowing for a potential access to other information available to the Activity Stream, such as browsing history, if the Snipper...

SUSE CVE-2020-35680

smtpd/lkafilter.c in OpenSMTPD before 6.8.0p1, in certain configurations, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted pattern of client activity, because the filter state machine does not properly maintain the I/O channel between th...

Malicious code in rrequests-toolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ebb7163837623c355f341e38804a36bdf11887c9d59b508d3fee6c960651e661 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in scikt-learn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1e9bef88276a424a966a4c39baf6f4fa094eb263ed757a8082a71a36d4860b5e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2082 Malicious code in pyintaller (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7c04c405b9cb81b56fb8445a063e858d5f952332c938200c3b13645f22dc1563 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pyinstallr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f2b04dc5f801036e2b2232284cac00ae9947d9430365a95aec226804aa88d11a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in coloama (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4403724bca3bb33b526d292dad1f722a9db89e271c5b9803bbd7e88bbaf5550b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Introducing Malwarebytes Application Block: How to block unauthorized software from executing on Windows endpoints

Malwarebytes is excited to announce Application Block, a new module for Nebula and OneView for MSPs which helps organizations easily thwart unwanted applications from launching on Windows endpoints. For as many applications out there that help you keep business running as usual, there are just as...

CVE-2023-0707

creationtimestamp| type| source ---|---|--- 2023-02-07 16:23:56+00:00| seen| https://t.me/cibsecurity/57655...

MAL-2023-78 Malicious code in action-destinations (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 96505de3d3aa2e8998dd55d2d3c5571986d30ba16c8bc9971c3f9e8348264ed9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-894 Malicious code in tokenlon-v5-subgraph (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware dceb07244c9168376047cfb891dbdf3048a9003f143fe5e73fad62a14471057e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

squidex 安全漏洞

squidex is a Headless CMS and Content Management Center. A security vulnerability exists in squidex versions prior to 7.4.0, which stems from the ability to inject Html into Activity...

ASB-A-244154558

In run of ChooseTypeAndAccountActivity.java, there is a possible escalation of privilege due to unsafe deserialization. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

Rapid7 Observes Use of Microsoft OneNote to Spread Redline Infostealer Malware

Author: Thomas Elkins Contributors: Matt Green, James Dunne, and Hernan Diaz Rapid7 routinely conducts research into the wide range of techniques that threat actors use to conduct malicious activity. One objective of this research is to discover new techniques being used in the wild, so we can...

New Report Reveals NikoWiper Malware That Targeted Ukraine Energy Sector

The Russia-affiliated Sandworm used yet another wiper malware strain dubbed NikoWiper as part of an attack that took place in October 2022 targeting an energy sector company in Ukraine. "The NikoWiper is based on SDelete, a command line utility from Microsoft that is used for securely deleting...

MAL-2023-716 Malicious code in python-tdigest-bindings (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5764e30c8f0fdecc8d1be71c4590440c7433bd9ff7ad6d0dad7d32eb41764303 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-761 Malicious code in satellite-precipitation-detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71c5cde7959fd946148f50e6e91fd1b378849bb1f402b798c0bfe0222b0a34b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-1003 Malicious code in ytreader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a69dfe4d469d389b8db7b4e27084c0d17aa03c753dc0336a622e08402e04b24 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-262 Malicious code in django-idm-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7500205256afd3e70ea8edbcfa2b5acf17cc55d212296b698b47098c635ef9a9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-264 Malicious code in django-template-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b8a4058c9a8f986347dd22fe461b25c3ae525959ed7a05da257b79c7aa4d9aad Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...