MAL-2023-1872 Malicious code in gittpython (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 861c72cc4cfc1c70ce57e5034c8f7bdf0e3b4ea5a4dd5624a19e3bb591ffde99 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2046 Malicious code in pycodestyel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx c9d2880f640cc5899fec331962e257de5886912d61fc69e363126b4758ee2219 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2192 Malicious code in rqeuests-toolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a7054c7a55e270b2d1538dc56187d623fc290acdb6220ba03d35d4f32211edf3 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2158 Malicious code in requests-otolbelt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2b0859d7c653755352e30a8a6b69da9c4db6210d03047f8400c29e5caa49b258 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1942 Malicious code in pilloow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 19029d33e10d61dabd32d2b74e1d284196fefa1663b2d633195e1081ad9c649e Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1891 Malicious code in lcick (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9e25a9d33bda3ebfd71312605b236dd37d82a17657ff57c2054436b598312c7f Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1585 Malicious code in apndas (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 14f8f30fe6a1d0714f50cc7a2cf10e2c5f99163533e57974048ec31e19024cf0 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in tenssorflow (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3457c812eebd7826b016b3a75d554ca0de0981cdbbde4ba969a423b277a92a6d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1902 Malicious code in matplotlb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a5230460f70d1de9cde080dfedaa2ca545ffd9e5179d0e7bc8ae0053481a3900 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1903 Malicious code in matplotlibb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a31369eb12eb0508727a82cd2b77fae37e8efebbee89e9e723e4864cf021c9f8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1896 Malicious code in matlotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d6be1dfc396c618352f2e1c3b411654c89c618a47b5c2ffd778fd51a6e18188d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2235 Malicious code in seleniium (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 57e23d7e61ff9ad57b53c8eaf276c5d14a226d7673cf17c6bf438a42d835ae88 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1648 Malicious code in beutifulsoup4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a74a36adea067d56842d1606f1bbeaa5d66d302d2c3d33a520d76b46ec81846b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Cross-Site Scripting (XSS)

org.apache.sling:org.apache.sling.cms is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the special characters before it output to the front end, allowing an attacker to inject and execute malicious JavaScript on victim's browser...

The vulnerability of the Mozilla Firefox browser for Android, related to state management errors, allows a hacker to exploit the system to disclose protected information.

The vulnerability of the Mozilla Firefox browser for Android is related to state management errors. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by the browser’s security features...

The Definitive Browser Security Checklist

Security stakeholders have come to realize that the prominent role the browser has in the modern corporate environment requires a re-evaluation of how it is managed and protected. While not long-ago web-borne risks were still addressed by a patchwork of endpoint, network, and cloud solutions, it ...

The Definitive Browser Security Checklist

Security stakeholders have come to realize that the prominent role the browser has in the modern corporate environment requires a re-evaluation of how it is managed and protected. While not long-ago web-borne risks were still addressed by a patchwork of endpoint, network, and cloud solutions, it ...

Ubuntu: Security Advisory (USN-5797-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mitigate the LastPass Attack Surface in Your Environment with this Free Tool

The latest breach announced by LastPass is a major cause for concern to security stakeholders. As often occurs, we are at a security limbo – on the one hand, as LastPass has noted, users who followed LastPass best practices would be exposed to practically zero to extremely low risk. However, to s...

CVE-2022-34471

When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest. If the manifest had been tampered with on the server, an attacker could trick the browser into downgrading the addon to a prior version. This...