MAL-2023-1832 Malicious code in freeqtrade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a1d85df46593cf38b75fcdfaa68cc0a4e6d7f4c2146719a0b3359c995c0bcb4c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1838 Malicious code in freqtraade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8dee746d88c5636acacd53a078f650424bf8658c8bd173ec8a1ed3e3b2aedc28 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in frreqtrade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c6634da106be1a5e6fbc9f381d92ba14243730eca4285e2923b5ea6843b65bd6 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1852 Malicious code in frreqtrade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c6634da106be1a5e6fbc9f381d92ba14243730eca4285e2923b5ea6843b65bd6 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in reqtrade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9eafd0ca4dd4d799f7fc2c72d39f61b3ea59fd355085c35889d3f640f62bb992 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1754 Malicious code in cxct (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7eed6522b04438f8b117873d5d6e997acf2bae3532e3a68b7c0a512fecdcb9bc Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in freqtade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b6b862a8428000fde13853f32950a879c71d151be8cac5583412481df1b93628 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1836 Malicious code in freqtade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b6b862a8428000fde13853f32950a879c71d151be8cac5583412481df1b93628 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cxt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e5ceb47158c98a7e5e036b33be987001008819f6bef951a662f983d5da7a0587 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in ccx (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4b65e79327daa2cc5ec5b36d4f94dde43607d8cb595f276122659ef69d86a25a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1672 Malicious code in cccxt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bbf77e85143db2624a1691f94e6382f42d72ab92eec168499ba0ac0b1f0081d3 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cccxt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bbf77e85143db2624a1691f94e6382f42d72ab92eec168499ba0ac0b1f0081d3 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in ccxxt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2f0475928d01aa7735ccbbd11aea089aa02c703d8449177cd3e5d32636246059 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1679 Malicious code in ccxxt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2f0475928d01aa7735ccbbd11aea089aa02c703d8449177cd3e5d32636246059 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Discourse Information Disclosure Vulnerability (CNVD-2023-07923)

Discourse is an open source community discussion platform. The platform includes community, email, and chat room features.A security vulnerability exists in versions of Discourse prior to 2.8.14. The vulnerability stems from the fact that recipients of group SMTP emails can see the email addresse...

AZL-13564 CVE-2023-0286 affecting package openssl for versions less than 1.1.1k-21

There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrectly specified the type of the x400Address field as ASN1TYPE. This field is subsequentl...

Helm 信息泄露漏洞

Helm is a Kubernetes package manager. An information disclosure vulnerability exists in versions of Helm prior to 3.11.1, which stems from the fact that information passed to the charts may be disclosed to the DNS servers used to look up IP addresses...

Important: openssl11

Issue Overview: A timing-based side channel exists in the OpenSSL RSA Decryption implementation, which could be sufficient to recover a ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption, an attacker would have to be able to send a very large number o...

Important: openssl

Issue Overview: A timing-based side channel exists in the OpenSSL RSA Decryption implementation, which could be sufficient to recover a ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption, an attacker would have to be able to send a very large number o...

The users can't add traits for their CidNFT's

Lines of code Vulnerability details Proof of Concept The CidNFT contract implements the add function for the users to add traits/subprotocol Id's to their CidNFT's. During calling add function, it validates whether the user is the owner of the provided CiDNFT and the user is approved by the owner...