Backdoor.Win32.Winshell.5_0 MVID-2022-0633 Hardcoded Credential

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/5bc5f72d19019a2fa3b75896e82ae1e5.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Winshell.50 Vulnerability: Weak Hardcoded Credentials Description: The...

TA505 Hackers Using TeslaGun Panel to Manage ServHelper Backdoor Attacks

Cybersecurity researchers have offered insight into a previously undocumented software control panel used by a financially motivated threat group known as TA505. "The group frequently changes its malware attack strategies in response to global cybercrime trends," Swiss cybersecurity firm PRODAFT...

Prynt Stealer Contains a Backdoor to Steal Victims' Data Stolen by Other Cybercriminals

Researchers discovered a private Telegram channel-based backdoor in the information stealing malware, dubbed Prynt Stealer, which its developer added with the intention of secretly stealing a copy of victims' exfiltrated data when used by other cybercriminals. "While this untrustworthy behavior i...

Buzzing in the Background: BumbleBee, a New Modular Backdoor Evolved From BookWorm

In March 2021, we investigated a backdoor with a unique modular architecture and called it BumbleBee due to a string embedded in the malware. However, in our recent investigations, we have discovered a controller application that expands its capabilities...

Exploit for Improper Initialization in Linux Linux_Kernel

dpipe Proof-of...

James Webb telescope images used to hide malware

A rather unique approach to spread malware using the popularity of the James Webb telescope images has been identified by the Securonix threat research team. The malware is being spread by a phishing campaign that includes a Microsoft Office attachment. Similar to traditional Office macros, the...

GHSA-CV6J-9835-P7FH exotel-py includes code execution backdoor inserted by a third party

The exotel aka exotel-py package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party. Users should downgrade to version 0.1.5 to avoid the problem...

exotel-py includes code execution backdoor inserted by a third party

The exotel aka exotel-py package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party. Users should downgrade to version 0.1.5 to avoid the problem...

CVE-2022-38792

The exotel aka exotel-py package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party...

CVE-2022-38792

The exotel aka exotel-py package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party...

CVE-2022-38792

The exotel aka exotel-py package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party...

Code injection

The exotel aka exotel-py package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party...

PYSEC-2022-43134

The exotel aka exotel-py package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party...

PYSEC-2022-43134

The exotel aka exotel-py package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party...

CVE-2022-38792

The exotel aka exotel-py package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party...

CVE-2022-38792

The exotel aka exotel-py package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party...

CVE-2022-38792

The exotel aka exotel-py package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party...

CVE-2022-38792

CVE-2022-38792 : The exotel (exotel-py) package on PyPI up to version 0.1.6 includes a code execution backdoor inserted by a third party. Exploitation details are not provided in the available documents. A remediation is to downgrade to version 0.1.5. The vulnerability has a high impact score (CV...

PT-2022-24570 · Pypi · Exotel

Name of the Vulnerable Software and Affected Versions: exotel aka exotel-py version 0.1.6 Description: The exotel package in PyPI includes a code execution backdoor inserted by a third party. This backdoor allows for code execution, posing a significant security risk. Users should be aware of thi...

exotel 安全漏洞

exotel is a Python module for exotels calls and sms api. A security vulnerability exists in PyPI exotel package version 0.1.6, which stems from including a code execution backdoor inserted by a third party...