CVE-2022-4331

An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. If a group with SAML SSO enabled is transferred to a new namespace as a child group, it's possible...

CVE-2022-4331

An issue has been discovered in GitLab EE affecting all versions starting from 15.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15.9 before 15.9.2. If a group with SAML SSO enabled is transferred to a new namespace as a child group, it's possible...

CVE-2022-4331

CVE-2022-4331 (GitLab EE) : Affects GitLab EE versions 15.1 up to but not including 15.7.8; 15.8 up to but not including 15.8.4; and 15.9 up to but not including 15.9.2. If a SAML SSO-enabled group is moved to a new namespace as a child group, a previously removed malicious maintainer/owner could...

PVS server lost the connection to vDisk after storage failover.

vDisks are located in NAS storage which is created as failover group. After storage failover occurs, PVS server loses the connection to the vDisks and does not automatically recover it. Target devices freeze during that time since the vDisk I/O to NAS storage stops...

MAL-2023-5395 Malicious code in py-paypalinfopip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d00980074e219dc11140953e97dbbf1b8f13c4d6efc450d19cfccfd12c8848b2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3130 Malicious code in esqnvidiaadram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx df81ceb2dfc3d91db398dd60bef12374d2d9b31b3b09fd2371d124ea8ed0773a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqproofosintkill (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bf4811abda99a1b5f8ceb80a500d0945f79c48da09513b638b6ae5b1808225c8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3941 Malicious code in libcraftlgtbload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5baa51be47458710923d431708febf1cec900cbcd510cfa9787632b2721658fc EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3248 Malicious code in esqproofosintkill (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bf4811abda99a1b5f8ceb80a500d0945f79c48da09513b638b6ae5b1808225c8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7385 Malicious code in tppongvisapip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 97034062effeb064e121185bdcc8b8d0277442b566e4c5049181bec477282e08 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6669 Malicious code in selfstudytoolrandom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 96bf68235754ce923b2685242740d39b1a44690bd9a02dfb799923b5830fc8c2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfstudytoolrandom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 96bf68235754ce923b2685242740d39b1a44690bd9a02dfb799923b5830fc8c2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7357 Malicious code in tppingvirtualrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e3649a98c407fac1ba78b0a309facaea2dc38925166d111ccb344329b5c02e1d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tppywpostram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9749334042f69b2d57d5a717164c02d248d88a7df907a4417cc2fa536439de9b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7490 Malicious code in tppywpostram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9749334042f69b2d57d5a717164c02d248d88a7df907a4417cc2fa536439de9b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6570 Malicious code in selfrandomhackedstudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4d54423199bee86602ae77e6da3d92100ce8d94494f9e1f6b56a0b14ae06f55c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Lazarus Group Exploits Zero-Day Vulnerability to Hack South Korean Financial Entity

The North Korea-linked Lazarus Group has been observed weaponizing flaws in an undisclosed software to breach a financial business entity in South Korea twice within a span of a year. While the first attack in May 2022 entailed the use of a vulnerable version of a certificate software that's wide...

Lazarus Group Exploits Zero-Day Vulnerability to Hack South Korean Financial Entity

The North Korea-linked Lazarus Group has been observed weaponizing flaws in an undisclosed software to breach a financial business entity in South Korea twice within a span of a year. While the first attack in May 2022 entailed the use of a vulnerable version of a certificate software that's wide...

Debian: Security Advisory (DLA-74-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in selfproofstudyrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 54d672d55b0f254859719e468f499db9702e82590a261936c5975a1ec355954c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...