BelT Block Cipher

BelT is a block cipher with a 128-bit block size and a 256-bit key, developed in Belarus and adopted as part of the Belarusian national standard STB 34.101.31 for encryption and integrity control. Its specification was issued as a preliminary standard in 2007, becoming a final standard in 2011...

Malicious code in humanapi-belt (npm)

The package humanapi-belt was found to contain malicious code. --- Credit: OpenSSF source...

Malicious code in ccl-utils-belt (npm)

--- Credit: OpenSSF source...

PHP Utility Belt - ajax.php RCE Detection

Detects PHP Utility Belt RCE by writing info.php via ajax.php code= parameter and verifying phpinfo output. !/usr/bin/env python3 -- coding: utf-8 -- """PHP Utility Belt ajax.php code execution.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

PHP Utility Belt - ajax.php RCE

Exploits PHP Utility Belt by evaluating PHP via ajax.php code= parameter. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """PHP Utility Belt ajax.php RCE — opens execute session.""" import base64 import re from kittysploit import from lib.protocols.http.httpclient...

MAL-2025-22789 Malicious code in humanapi-belt (npm)

The package humanapi-belt was found to contain malicious code...

Malicious code in humanapi-belt (npm)

The package humanapi-belt was found to contain malicious code...

MAL-2024-1961 Malicious code in ccl-utils-belt (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-7070 Malicious code in @chewyy/ccl-utils-belt (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ccl-utils-belt (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @chewyy/ccl-utils-belt (npm)

--- -= Per source details. Do not edit below this line.=-...

greenbeltmovement.org Cross Site Scripting vulnerability OBB-3811155

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious Package

Overview axp-utility-belt is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

MAL-2022-1214 Malicious code in axp-utility-belt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 432021c8e0da8798e3783329a5a3ff6ec980b17267c665dc0c93d2e001a0e6a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in axp-utility-belt

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in axp-utility-belt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 432021c8e0da8798e3783329a5a3ff6ec980b17267c665dc0c93d2e001a0e6a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

New PlugX variant “Talisman” used by famous Chinese APT

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here PlugX is a well-known malware family with samples dating back to as early as 2008. A Chinese state-backed threat actor, RedFoxtrot group, is discovered to use a new variant of the PlugX malware, Talisman. The threat actor grou...

PlugX: A Talisman to Behold

PlugX: A Talisman to Behold By Max Kersten, Marc Elias, Leandro Velasco, and Alexandre Mundo Alguacil · March 28, 2022 For over a decade, the PlugX malware has been observed internationally with different variants found around the world. This blog covers a PlugX variant that we have named Talisma...

[SECURITY] Fedora 34 Update: nodejs-underscore-1.13.1-1.fc34

Underscore.js is a utility-belt library for JavaScript that provides support for the usual functional suspects each, map, reduce, filter... without extending any core JavaScript objects...

Ubiquiti breach, and other IoT security problems

Networking equipment manufacturer Ubiquiti sent out an email to warn users about a possible data breach. The email stated there had been unauthorized access to its IT systems that are hosted with a third-party cloud provider. Ubiquiti Networks sells networking devices and IoT devices. It did not...