PT-2023-20873 · Unknown · Onekeyadmin

Name of the Vulnerable Software and Affected Versions: onekeyadmin version 1.3.9 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability is present in the Admin Group module. Recommendations: For onekeyadmin version 1.3.9, consider disabling the...

CVE-2023-26955

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Admin Group module...

OneKeyAdmin 跨站脚本漏洞

OneKeyAdmin is About plug-in management system based on Thinkphp6+Element, website, applet, mall, CMS, APP, ERP, API interface a system to get it all done, no scaffolding out of the box! A security vulnerability exists in OneKeyAdmin version 1.3.9, which stems from the discovery of a stored...

CVE-2023-26954

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the User Group module...

CVE-2023-26955

Affected software: onekeyadmin v1.3.9. Vulnerability: stored cross-site scripting (XSS) via the Admin Group module. Root cause / nature: XSS flaw enabling injection in the Admin Group component, as reported across multiple sources. Impact (as stated): medium severity per CVSS 3.1 (Base score 5.4)...

CVE-2023-26955

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Admin Group module...

PT-2023-20872 · Unknown · Onekeyadmin

Name of the Vulnerable Software and Affected Versions: onekeyadmin version 1.3.9 Description: The issue is related to a stored cross-site scripting XSS vulnerability. This vulnerability is present in the User Group module. Recommendations: For onekeyadmin version 1.3.9, consider disabling the Use...

CVE-2023-26954

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the User Group module...

Core Members of DoppelPaymer Ransomware Gang Targeted in Germany and Ukraine

Law enforcement authorities from Germany and Ukraine have targeted suspected core members of a cybercrime group that has been behind large-scale attacks using DoppelPaymer ransomware. The operation, which took place on February 28, 2023, was carried out with support from the Dutch National Police...

The vulnerability of the PowerScale OneFS operating system, related to user being assigned to an inappropriate group, allows attackers to escalate their privileges and expose sensitive information.

The vulnerability of the PowerScale OneFS operating system is related to the user being assigned to an inappropriate group. Exploiting this vulnerability allows a malicious actor to increase their privileges and expose sensitive information...

GitLab: Attacker can create malicious child epics linked to a victim's epic in an unrelated group

A vulnerability existed in GitLab that allowed an attacker to create malicious child epics linked to a victim's epic in an unrelated group. The attacker could create the malicious child epics by referring to the victim's epic via the parentid. The vulnerability was due to the lack of proper acces...

MAL-2023-4588 Malicious code in liburlcraftgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx eb06ad8b5fee491f5b9567ad8937fcbe7c55fb3c421a9e259fdb41bf852da623 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7345 Malicious code in tppinghackedpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bd0cb3c5b450307834ff52807883f3af3ef67289be5c025383dc5644143b93c4 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5968 Malicious code in selfcontroledintel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ea9d18c4e891130d149a99fdde160834d53f3c33789d2e771d40245b33c943b7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7487 Malicious code in tppywloadhydra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f591f3b48488f01d199518319b5967a224876e77f0202158297551519153b34b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7252 Malicious code in tpmaskvisacontrol (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b41b39ff471852208bd4891aead33592018aaac7b42752f0359c638e71e17cbf EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-pywvisahydra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ab59bbf5db4a3372b2a56c8f2d70af10839c3d5e4e7278ead807ed7d07df0e8f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2746 Malicious code in esqcandyosintcandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx efee5266049ae65f045ee5e7757635552fd870648619564a20328bab9038e7f8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6640 Malicious code in selfstringpullpush (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2e76f7505f1e0feeae6a6f20c29706b28f3039749673317bf8dc820239b11fb3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6082 Malicious code in selfgamepypost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b752d0d154d23b39a06208732e66acc078f25853c4e8773d6810722a5518d98a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...