6532 matches found
Malicious Package
Overview kubeman is a malicious package. This package contains malicious code that collects sensitive information about the victim and sends it to the attacker's remote server. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Malicious Package
Overview agoda-design-toolkit-2 is a malicious package. This package contains malicious code that collects sensitive information about the victim and sends it to the attacker's remote server. While this package might be attempting to impersonate a valid organization, there is no connection betwee...
Malicious Package
Overview braintreeexpressexample is a malicious package. This package contains malicious code that collects sensitive information about the victim and sends it to the attacker's remote server. While this package might be attempting to impersonate a valid organization, there is no connection betwe...
Alert: Adobe Commerce and Magento Stores Under Attack from CosmicSting Exploit
Cybersecurity researchers have disclosed that 5% of all Adobe Commerce and Magento stores have been hacked by malicious actors by exploiting a security vulnerability dubbed CosmicSting. Tracked as CVE-2024-34102 CVSS score: 9.8, the critical flaw relates to an improper restriction of XML external...
Darktrace AI Halts Thread Hijacking Attack Targeting Major Company
Darktrace AI detected and stopped a thread hijacking attack in real-time, preventing email account compromise and data theft.…...
Common UNIX Printing System (CUPS) Vulnerabilities
Common UNIX Printing System CUPS is an open-source printing system for Linux and other UNIX-like operating systems. CUPS uses the IPP Internet Printing Protocol to allow for printing with local and network printers. By combining these vulnerabilities CVE-2024-47076, CVE-2024-47177, CVE-2024-47175...
PT-2024-31870 · Unknown · Blood Bank/Donation Management System
Name of the Vulnerable Software and Affected Versions: Blood Bank And Donation Management System version 1.0 Description: A Cross Site Scripting XSS issue in the add donor.php file allows an attacker to inject malicious scripts that will be executed when the Donor List is viewed. This enables the...
U.S. Dept Of Defense: CSRF to XSS
The vulnerability allowed an attacker to combine Cross-Site Scripting XSS and Cross-Site Request Forgery CSRF attacks. The XSS vulnerability allowed the injection of malicious scripts that could be executed in the victim's browser, potentially stealing sensitive data like cookies or session token...
SEMCMS SQL Injection Vulnerability (CNVD-2024-39254)
SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A SQL injection vulnerability exists in SEMCMS version 4.8, which originates from the lack of validation of external SQL statements in SEMCMSMain.php. An attacker can exploit this vulnerability to execut...
Vehicle Management edit1.php File SQL Injection Vulnerability
Vehicle Management is a vehicle management system. Vehicle Management suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the /edit1.php file parameter sno. An attacker can exploit this vulnerability to execute illegal SQL comman...
CVE-2024-8770
A Cross-Site Scripting XSS vulnerability was identified in the repository transfer feature of GitHub Enterprise Server, which allows attackers to steal sensitive user information via social engineering. This vulnerability affected all versions of GitHub Enterprise Server and was fixed in version...
The vulnerability of Intel Microcode processors lies in the default access settings, which allow attackers to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of Intel Microcode processors relates to the default access rights settings. Exploiting this vulnerability allows attackers to gain access to confidential data, compromise its integrity, and cause service failures...
Code-Projects Vehicle Management SQL注入漏洞
Vehicle Management is a vehicle management system. Vehicle Management suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the /edit1.php file parameter sno. An attacker can exploit this vulnerability to execute illegal SQL comman...
MAL-2024-12261 Malicious code in easypydb (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6bba8fa7c973e17898962b7fa6aebecdd0d9149b9e3a1f078bbc57f5e4bf7f0a The package is a wrapper around "s1db" package, which offers some kind of easy online database. However, this package silently exfiltrates credentials given by...
Malicious code in easypydb (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 6bba8fa7c973e17898962b7fa6aebecdd0d9149b9e3a1f078bbc57f5e4bf7f0a The package is a wrapper around "s1db" package, which offers some kind of easy online database. However, this package silently exfiltrates credentials given by...
SEMCMS 安全漏洞
SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A SQL injection vulnerability exists in SEMCMS version 4.8, which originates from the lack of validation of external SQL statements in SEMCMSMain.php. An attacker can exploit this vulnerability to execut...
Hospital Management System check_availability.php File SQL Injection Vulnerability
Hospital Management System a hospital management system. Hospital Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the email parameter of the checkavailability.php file. An attacker can exploit this...
Healthcare's Diagnosis is Critical: The Cure is Cybersecurity Hygiene
Cybersecurity in healthcare has never been more urgent. As the most vulnerable industry and largest target for cybercriminals, healthcare is facing an increasing wave of cyberattacks. When a hospital's systems are held hostage by ransomware, it's not just data at risk — it's the care of patients...
Microsoft Warns of New INC Ransomware Targeting U.S. Healthcare Sector
Microsoft has revealed that a financially motivated threat actor has been observed using a ransomware strain called INC for the first time to target the healthcare sector in the U.S. The tech giant's threat intelligence team is tracking the activity under the name Vanilla Tempest formerly DEV-083...