Lucene search
+L

2850 matches found

Github Security Blog
Github Security Blog
added 2020/09/11 9:12 p.m.37 views

Malicious Package in blubird

Version 3.5.0 of blubird contains malicious code . The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. Upon require the package attempts to start a cryptocurrency miner using coin-hive. Recommendation Remove the package from you...

4.2AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/09/11 9:12 p.m.12 views

GHSA-RVWW-X6M4-4VC2 Malicious Package in blubird

Version 3.5.0 of blubird contains malicious code . The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. Upon require the package attempts to start a cryptocurrency miner using coin-hive. Recommendation Remove the package from you...

9.8CVSS7.2AI score
SaveExploits0References1
OSV
OSV
added 2020/09/11 9:10 p.m.8 views

GHSA-4XGP-XRG3-C73W Malicious Package in commqnder

All versions of commqnder contain malicious code . The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. Upon require the package attempts to start a cryptocurrency miner using coin-hive. Recommendation Remove the package from you...

9.8CVSS7.2AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2020/09/11 9:10 p.m.36 views

Malicious Package in commqnder

All versions of commqnder contain malicious code . The package is malware designed to take advantage of users making a mistake when typing the name of a module to install. Upon require the package attempts to start a cryptocurrency miner using coin-hive. Recommendation Remove the package from you...

4.6AI score
SaveExploits0References2Affected Software1
Trend Micro Simply Security
Trend Micro Simply Security
added 2020/09/11 12:43 p.m.27 views

This Week in Security News: Microsoft Fixes 129 Vulnerabilities for September’s Patch Tuesday and Trend Micro’s XDR Offerings Simplify and Optimize Detection and Response

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. This week, read about this month’s Patch Tuesday update from Microsoft. Also, learn about Trend Micro’s Worry-Free XDR: a new version of its XDR platfo...

7.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2020/09/10 6:59 p.m.16 views

Hackers Stole $5.4 Million From Eterbase Cryptocurrency Exchange

Cybercriminals successfully plundered another digital cryptocurrency exchange. European cryptocurrency exchange Eterbase this week disclosed a massive breach of its network by an unknown group of hackers who stole cryptocurrencies worth 5.4 million dollars. Eterbase, which has now entered...

7.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2020/09/10 6:59 p.m.9 views

Hackers Stole $5.4 Million From Eterbase Cryptocurrency Exchange

Cybercriminals successfully plundered another digital cryptocurrency exchange. European cryptocurrency exchange Eterbase this week disclosed a massive breach of its network by an unknown group of hackers who stole cryptocurrencies worth 5.4 million dollars. Eterbase, which has now entered...

5.8AI score
SaveExploits0
CVE
CVE
added 2020/09/10 4:32 p.m.74 views

CVE-2018-17145

CVE-2018-17145 affects Bitcoin Core 0.16.x prior to 0.16.2 and Bitcoin Knots 0.16.x prior to 0.16.2. The root cause is mishandling of inventory (inv) messages, allowing an attacker to cause remote denial of service by flooding with multiple transaction inv messages using random hashes. Impact des...

7.5CVSS7.4AI score0.04086EPSS
SaveExploits1References4Affected Software7
Cvelist
Cvelist
added 2020/09/10 4:32 p.m.46 views

CVE-2018-17145

Bitcoin Core 0.16.x before 0.16.2 and Bitcoin Knots 0.16.x before 0.16.2 allow remote denial of service via a flood of multiple transaction inv messages with random hashes, aka INVDoS. NOTE: this can also affect other cryptocurrencies, e.g., if they were forked from Bitcoin Core after 2017-11-15...

7.5AI score0.04086EPSS
SaveExploits1References4
The Hacker News
The Hacker News
added 2020/09/09 8:23 a.m.60 views

Cybercriminals Are Using Legit Cloud Monitoring Tools As Backdoor

A cybercrime group that has previously struck Docker and Kubernetes cloud environments has evolved to repurpose genuine cloud monitoring tools as a backdoor to carry out malicious attacks, according to new research. "To our knowledge, this is the first time attackers have been caught using...

0.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2020/09/09 8:23 a.m.18 views

Cybercriminals Are Using Legit Cloud Monitoring Tools As Backdoor

A cybercrime group that has previously struck Docker and Kubernetes cloud environments has evolved to repurpose genuine cloud monitoring tools as a backdoor to carry out malicious attacks, according to new research. "To our knowledge, this is the first time attackers have been caught using...

5.9AI score
SaveExploits0
OSV
OSV
added 2020/09/04 4:51 p.m.23 views

GHSA-4HQ8-V42X-9WX3 Malicious Package in bs85check

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2020/09/04 4:51 p.m.21 views

Malicious Package in bs85check

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

3.4AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/09/04 4:50 p.m.13 views

GHSA-97MP-9G5C-6C93 Malicious Package in bs58chcek

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2020/09/04 4:50 p.m.23 views

Malicious Package in bs58chcek

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

3.4AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/09/04 4:49 p.m.11 views

GHSA-3CPJ-MJ3Q-82WR Malicious Package in bs58chek

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2020/09/04 4:49 p.m.21 views

Malicious Package in bs58chek

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

3.4AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/09/04 4:48 p.m.11 views

GHSA-7XC4-793X-25JP Malicious Package in bpi66

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2020/09/04 4:48 p.m.22 views

Malicious Package in bpi66

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

3.4AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/09/04 4:47 p.m.14 views

GHSA-762C-V946-PF25 Malicious Package in bpi39

All versions of this package contained malware. The package was designed to find and exfiltrate cryptocurrency wallets. Recommendation Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated...

9.1CVSS7AI score
SaveExploits0References1
Rows per page
Query Builder