Malicious code in frqetrade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1bc75e2a39c7f2eae7fcda876f4a91a60c46b9a6a6fdf0636c9d176ed2c85e0d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in freqtradee (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 318a7b0891c2181ceff02ff4d8b3de0f33f229b2ad62a4593472e89caaa8f28c Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in frqtrade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4e9a6f5c4e1499c80fad35d26f4e88bc0da564817b89bc70ca6aade3721002c8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in fretqrade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6006c2d8bfe788dd4e9c483d3e8eb3eb6d5521c9197bf9fe463f31e878eb35d7 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in freqrtade (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2eb06d045df3e6b25dc541a29a6b78951722c0b8b6d5e3596e1becf0c64301cd Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in cccxt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bbf77e85143db2624a1691f94e6382f42d72ab92eec168499ba0ac0b1f0081d3 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

CVE-2022-1867

Insufficient validation of untrusted input in Data Transfer in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to bypass same origin policy via a crafted clipboard content...

PyRDP - RDP Monster-In-The-Middle (Mitm) And Library For Python With The Ability To Watch Connections Live Or After The Fact

PyRDP is a Python Remote Desktop Protocol RDP Monster-in-the-Middle MITM tool and library. It features a few tools: RDP Monster-in-the-Middle Logs credentials used when connecting Steals data copied to the clipboard Saves a copy of the files transferred over the network Crawls shared drives in th...

Mozilla Firefox < 94.0

The version of Firefox installed on the remote Windows host is prior to 94.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-48 advisory. - The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such...

Security Vulnerabilities fixed in Firefox 94 — Mozilla

The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such as executing scripts or navigating the top-level frame. When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have...

Zammad Cross-Site Scripting Vulnerability (CNVD-2021-81952)

Zammad is an open source web-based help desk/customer support system. a cross-site scripting vulnerability exists in the chat feature in versions of Zammad prior to 4.1.1. The vulnerability stems from improper handling of clipboard data. An attacker could exploit the vulnerability to execute...

CVE-2021-42088

An issue was discovered in Zammad before 4.1.1. The Chat functionality allows XSS because clipboard data is mishandled...

CVE-2021-42088

An issue was discovered in Zammad before 4.1.1. The Chat functionality allows XSS because clipboard data is mishandled...

Cross site scripting

An issue was discovered in Zammad before 4.1.1. The Chat functionality allows XSS because clipboard data is mishandled...

CVE-2021-42088

An issue was discovered in Zammad before 4.1.1. The Chat functionality allows XSS because clipboard data is mishandled...

CVE-2021-42088

An issue was discovered in Zammad before 4.1.1. The Chat functionality allows XSS because clipboard data is mishandled...

CVE-2021-42088

Zammad vulnerability CVE-2021-42088 affects the chat feature in Zammad versions before 4.1.1. The root cause is mishandling of clipboard data, allowing cross-site scripting (XSS). This affects users of Zammad’s chat functionality, where clipboard content can be injected and executed in the browse...

Zammad 跨站脚本漏洞

Zammad is an open source web-based help desk/customer support system. a cross-site scripting vulnerability exists in the chat feature in versions of Zammad prior to 4.1.1. The vulnerability stems from improper handling of clipboard data. An attacker could exploit the vulnerability to execute...

PT-2021-21892 · Mattermost · Mattermost

Name of the Vulnerable Software and Affected Versions: Mattermost versions 5.38 and earlier Description: The issue is related to insufficient sanitization of clipboard contents, allowing a user-assisted attacker to inject arbitrary web script in product deployments where the default Content...

CVE-2021-37700

@github/paste-markdown is an npm package for pasting markdown objects. A self Cross-Site Scripting vulnerability exists in the @github/paste-markdown before version 0.3.4. If the clipboard data contains the string , a div is dynamically created, and the clipboard content is copied into its...