870 matches found
EUVD-2025-7086
Malicious code in bioql PyPI...
EUVD-2024-48781
Malicious code in bioql PyPI...
EUVD-2022-33624
Malicious code in bioql PyPI...
EUVD-2024-24397
Malicious code in bioql PyPI...
EUVD-2023-31842
Malicious code in bioql PyPI...
EUVD-2021-8277
Malicious code in bioql PyPI...
EUVD-2024-2827
Malicious code in bioql PyPI...
UAT-8099: Chinese-speaking cybercrime group targets high-value IIS for SEO fraud
Cisco Talos is disclosing details on UAT-8099, a Chinese-speaking cybercrime group mainly involved in search engine optimization SEO fraud and theft of high-value credentials, configuration files, and certificate data. Cisco's file census and DNS analysis show affected Internet Information Servic...
DarkCloud Infostealer Relaunched to Grab Credentials, Crypto and Contacts
eSentire TRU analyses the new DarkCloud V4.2 infostealer, rewritten in VB6. Find out how the malware steals browser data, crypto, and contacts via targeted phishing...
cors-anywhere vulnerable to server-side request forgery
Rob -- W / cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets SSRF. Because the proxy forwards requests and headers, an attacker can reach internal-only endpoints and link-local metadata services...
CVE-2020-36851
Rob--W cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets SSRF. Because the proxy forwards requests and headers, an attacker can reach internal-only endpoints and link-local metadata services,...
CVE-2020-36851
Rob--W cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets SSRF. Because the proxy forwards requests and headers, an attacker can reach internal-only endpoints and link-local metadata services,...
CVE-2020-36851 Rob--W cors-anywhere Misconfigured CORS Proxy Allows SSRF
Rob--W cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets SSRF. Because the proxy forwards requests and headers, an attacker can reach internal-only endpoints and link-local metadata services,...
CVE-2020-36851
CVE-2020-36851 affects cors-anywhere/server-side proxy configurations that run as an open proxy. The issue allows unauthenticated external users to induce the proxy to make HTTP requests to arbitrary targets (SSRF) because the proxy forwards requests and headers, enabling access to internal endpo...
CVE-2025-54855
Cleartext storage of sensitive information was discovered in Click Programming Software version v3.60. The vulnerability can be exploited by a local user with access to the file system, while an administrator session is active, to steal credentials stored in clear text...
Malicious code in devextreme-angular-rpk (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48daa4ee53933f4f74c8a6cd7644ad441f316912aa3e282498fe602b91f2bc40 Any computer that has this package installed or running should be considered fully compromised. All...
Malicious code in @operato/board (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a4316f3e39e55c377e4e12e0dd89c41b61d85b9cdc2c49188568b801ef6b133f Any computer that has this package installed or running should be considered fully compromised. All...
Malicious code in capacitor-plugin-ihealth (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a74e8404cbb6bed0d720944cd8e6b06a310c8358bc3ce6065c60146610ff52e9 Any computer that has this package installed or running should be considered fully compromised. All...
Malicious code in config-cordova (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c6be890bb2add4317485a3489a291b37fc52ecb9b16d9d5f5f1a6c67421c14c6 Any computer that has this package installed or running should be considered fully compromised. All...
Malicious code in @art-ws/db-context (npm)
The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 72aeba541e18c7562da7a71bea780fecdb34e6a64f033ee26245d2349ca786df Any computer that has this package installed or running should be considered fully compromised. All...