1371 matches found
PT-2024-30257 · Unknown · Tosei Online Store Management System
Name of the Vulnerable Software and Affected Versions: TOSEI online store management system versions v4.02 through v4.04 Description: An issue in the downloader.php component allows attackers to execute a directory traversal. Recommendations: For versions v4.02 through v4.04, consider disabling t...
CVE-2024-43022
TOSEI online store management system (versions v4.02–v4.04) contains a vulnerability in the downloader.php component that enables directory traversal. The issue, described in multiple sources (NVD, Red Hat, CVE lists, CNNVD), allows an attacker to read arbitrary files on the server. Root cause is...
Malicious code in distube-fast (npm)
This package is a starjack of distube with the addition of a malicious postinstall hook which downloads a PE with characteristics of a downloader/infostealer...
MAL-2024-7869 Malicious code in distube-fast (npm)
This package is a starjack of distube with the addition of a malicious postinstall hook which downloads a PE with characteristics of a downloader/infostealer...
Cybercriminals Target Polish Businesses with Agent Tesla and Formbook Malware
Cybersecurity researchers have detailed widespread phishing campaigns targeting small and medium-sized businesses SMBs in Poland during May 2024 that led to the deployment of several malware families like Agent Tesla, Formbook, and Remcos RAT. Some of the other regions targeted by the campaigns...
OneDrive Pastejacking
OneDrive Pastejacking: The crafty phishing and downloader campaign By Rafael Pena · July 29, 2024 Over the past few weeks, the Trellix Advanced Research Center has observed a sophisticated Phishing/downloader campaign targeting Microsoft OneDrive users. This campaign heavily relies on social...
Malicious code in szn-search-mlops-serp-downloader (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8e35cfed38428b7a513be4c205127136c3ff4884fd2045b3ad9026c9569068c7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2025-3005 Malicious code in szn-search-mlops-serp-downloader (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 8e35cfed38428b7a513be4c205127136c3ff4884fd2045b3ad9026c9569068c7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
Malicious code in harthat-chain (npm)
The package contains a preinstall hook which silently executes a malicious script with downloader functionality. This is characteristic of an ongoing North Korean state-sponsored campaign...
SocGholish Malware Exploits BOINC Project for Covert Cyberattacks
The JavaScript downloader malware known as SocGholish aka FakeUpdates is being used to deliver a remote access trojan called AsyncRAT as well as a legitimate open-source project called BOINC. BOINC, short for Berkeley Open Infrastructure Network Computing Client, is an open-source "volunteer...
The vulnerability of the U-Boot network media player Chromecast’s downloader allows a hacker to bypass the secure download mechanism.
The vulnerability of the U-Boot network media player Chromecast relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to bypass the secure download mechanism...
yt-dlp Security Vulnerabilities
yt-dlp is based on the youtube-dl branch of the now inactive youtube-dlc. A security vulnerability exists in versions of yt-dlp prior to 2024.07.01, which stems from an unrestricted download file extension that could lead to the creation of arbitrary filenames in the download folder and path...
Malicious code in down_load_epub_the_neighbor_favor_dupa1y (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in down_load_epub_something_about_you_z9ty4k (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in down_load_epub_by_the_time_you_read_this_i_ll_be_dead_h4icbn (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in down_load_ebook_this_is_how_it_feels_by_mike_keegan_kwzvy (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in down_load_ebook_supermacht_china_die_chinesische_weltmacht_aus_a_by_hermann_rupold_lfaiq (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in down_load_ebook_la_scienza_dei_capelli_by_elena_accorsi_buttini_l2q0j (npm)
--- -= Per source details. Do not edit below this line.=-...