SUSE CVE-2018-18494

A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location property to cause a redirection to another site using performance.getEntries. This is a same-origin policy violation and could allow for data theft. This vulnerability affects...

SUSE CVE-2019-3890

It was discovered evolution-ews before 3.31.3 does not check the validity of SSL certificates. An attacker could abuse this flaw to get confidential information by tricking the user into connecting to a fake server without the user noticing the difference...

SUSE CVE-2019-9817

Images from a different domain can be read using a canvas object in some circumstances. This could be used to steal image data from a different site in violation of same-origin policy. This vulnerability affects Thunderbird 60.7, Firefox 67, and Firefox ESR 60.7...

SUSE CVE-2020-6438

Insufficient policy enforcement in extensions in Google Chrome prior to 81.0.4044.92 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension...

SUSE CVE-2021-21185

Insufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an attacker who convinced a user to install a malicious extension to obtain sensitive information via a crafted Chrome Extension...

CVE-2023-23553

Control By Web X-400 devices are vulnerable to a cross-site scripting attack, which could result in private and session information being transferred to the attacker...

CVE-2023-23553

CVE-2023-23553 is a Cross-Site Scripting vulnerability affecting Control By Web X-400 web-enabled industrial I/O controllers. The issue arises from improper input handling during web page generation, allowing leakage of private and session information. Affected products: X-400 devices with firmwa...

Clop Ransomware Group Claims Responsibility for GoAnywhere MFT Attacks

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The Clop ransomware group claims responsibility for recent cyber attacks that exploited a zero-day vulnerability in the GoAnywhere MFT secure file transfer tool. The vulnerability, now known as...

Malicious code in tcalendar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 51218378709bfe987aadc08f4c49c00938dd166c52ea0f450de5b7ce9ba1289a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in tkcalnedar (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3278249ca47f04ae413f07499cdbb1ddb9ea1b2728b08f0dffa7259c44478190 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautifulsou (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx da2062b8d076556b32fa8c5c2755a46634ea891182547b05c2652a565021d825 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in beautifusoup (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3a6c340d387a9739780a2da49186b1349c0c82073cbe49bf70102e75cb1e55f2 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pycodestylle (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8aa441194124b7b9601ce310afeada571769c6660bb0dae001671fdfbd91af0f Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in gitpytohn (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6d3794294c17a3d907304fefedc5e2344bd1644ec1b20803ced3b4570aa2ae2a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prrompt-toolkit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 55da4f454e16103986c37965b682072d1534eaecd0355710ca6276d5a583e7e1 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in prompt-toolkt (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 80aec43c96a51141e395d43d20bf4fffda17b0cd6a8e237053706935ef410268 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in progressba2r (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 57ad7eeb7e8290f07b52a1170c9522d6542094ec49d0bedcbff805b83804cdde Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in progessbar2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ea84655a6bdf22367da8b19f14ddad7fd954647aea7d9a1898691d1b33e36d37 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pyscks (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 218fe0fc74884d069c0760327f28a1518fff68c67d72088791bf21e76ec0f722 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in discord-webhoook (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7b30cef689c4557df9f66d49904ba638679b48446f91e53ba1b2d04ee08f962f Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...