MAL-2023-1589 Malicious code in bautifulsoup4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5568949c935358b2cab5888250380ee3ba6ae0e571428ed047e671c0e87e9606 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1633 Malicious code in beautifuulsoup4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1b28d128b3f0ec27a1fb88bed6ced16fdc05db733e29933fac53252cb6e45387 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1918 Malicious code in olorama (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e385302eafb601f3ced335aa1516398eb7a849601a2a32b02aaf145bc9af6127 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2446 Malicious code in yffinance (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 197adcb4a9df9852620e9e93578b7ce77d3e1348d77521056dc0426405a7dd0a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-2451 Malicious code in yfinace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8fb9b040b8ad12632ab1cd1f6eaa89e250d0db7c044e2ab537e22b6b65c3a65c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1670 Malicious code in btcoinlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 983b735ae43a6b842d91f47a24b7e89a827e5236f30af6d3e202b5d5b3c9bab6 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in bbitcoinlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d4ae626d55de07d317671da449112e6758ad9550639e86a53a4349d44da0aad2 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1745 Malicious code in crypttofeed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5c62d3f6332ba772787a4d6243981bf1ac8450cdc3b41f8ad9b204b31bee5633 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

MAL-2023-1701 Malicious code in crpytofeed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0b9db25f34f7a9250b4093047dcb9adb46d11bab8ff5847658113f6b656db669 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cryyptofeed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 41392e3bca330d68f162e39b7d1295d7f7c123ce693869c5ed2b296f40d5bd1c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Hackers Bombard Open Source Repositories with Over 144,000 Malicious Packages

NuGet, PyPi, and npm ecosystems are the target of a new campaign that has resulted in over 144,000 packages being published by unknown threat actors. "The packages were part of a new attack vector, with attackers spamming the open source ecosystem with packages containing links to phishing...

GHSA-P86X-75J8-W4XH Stored XSS vulnerability in Jenkins Checkmarx Plugin

heckmarx Plugin processes Checkmarx service API responses and generates HTML reports from them for rendering on the Jenkins UI. Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports. This results in a stored...

Stored XSS vulnerability in Jenkins Checkmarx Plugin

heckmarx Plugin processes Checkmarx service API responses and generates HTML reports from them for rendering on the Jenkins UI. Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports. This results in a stored...

CVE-2022-46684

Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2022-46684

Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting XSS vulnerability...

Cross site scripting

Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2022-46684: Improper Neutralization of Input During Web Page Generation

Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2022-46684

Jenkins Checkmarx Plugin 2022.3.3 and earlier does not escape values returned from the Checkmarx service API before inserting them into HTML reports, resulting in a stored cross-site scripting XSS vulnerability...

PT-2022-27948 · Jenkins · Jenkins Checkmarx Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Checkmarx Plugin versions 2022.3.3 and earlier Description: The issue is related to a stored cross-site scripting XSS vulnerability. It occurs because the plugin does not escape values returned from the Checkmarx service API before...

CVE-2022-46684

CVE-2022-46684 affects the Jenkins Checkmarx Plugin, versions 2022.3.3 and earlier. The vulnerability arises because the plugin does not escape values returned from the Checkmarx service API before inserting them into HTML reports, enabling stored cross-site scripting (XSS). Exploitation is tied ...