Lucene search
+L

787 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/08/26 6:06 a.m.•5 views

Malicious code in hydra-consent-app-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44bb7f6bf0f9abc4741ab850705b17f64105e289174cd87fd51831bc95b726c3 The OpenSSF Package Analysis project identified 'hydra-consent-app-express' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

6.9AI score
SaveExploits0
OSV
OSV
•added 2023/08/26 6:06 a.m.•15 views

MAL-2023-7917 Malicious code in hydra-consent-app-express (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 44bb7f6bf0f9abc4741ab850705b17f64105e289174cd87fd51831bc95b726c3 The OpenSSF Package Analysis project identified 'hydra-consent-app-express' @ 2.0.0 npm as malicious. It is considered malicious because: - The...

7.1AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2023/08/04 12:00 a.m.•28 views

Apple macOS Hydra Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the Hydra library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the Hydr...

3.3CVSS6.2AI score0.00323EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/07/31 4:49 a.m.•6 views

Malicious code in ory-hydra-mock-oauth2-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65a839721d0fab0dc481a43bb9cf463966ebf8badc1ed1a9beebdc0724262a94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2023/07/31 4:49 a.m.•14 views

MAL-2023-1017 Malicious code in ory-hydra-mock-oauth2-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65a839721d0fab0dc481a43bb9cf463966ebf8badc1ed1a9beebdc0724262a94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/06/27 12:00 a.m.•12 views

PT-2023-8989 · Apple +1 · Apple Macos +1

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue is related to a buffer out-of-bounds write in the Model I/O framework of the macOS operating system. It may allow an attacker to execute arbitrary code with the help of a specially crafted fil...

7.8CVSS7.6AI score0.00234EPSS
SaveExploits0References11
Zero Day Initiative
Zero Day Initiative
•added 2023/06/08 12:00 a.m.•31 views

Apple macOS Hydra USD Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Apple macOS. Interaction with the Hydra library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the Hydr...

3.3CVSS6.2AI score0.00238EPSS
SaveExploits0References1
The Hacker News
The Hacker News
•added 2023/01/19 10:43 a.m.•4 views

Bitzlato Crypto Exchange Founder Arrested for Aiding Cybercriminals

The U.S. Department of Justice DoJ on Wednesday announced the arrest of Anatoly Legkodymov aka Gandalf and Tolik, the cofounder of Hong Kong-registered cryptocurrency exchange Bitzlato, for allegedly processing $700 million in illicit funds. The 40-year-old Russian national, who was arrested in...

6.7AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2022/06/20 8:19 p.m.•9 views

Malicious code in hydra-jekyll-bookshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61806f0286661ce99dd8fb9aa65389df9cf4596c31a083cbf1397726c35f4b3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
•added 2022/06/20 8:19 p.m.•12 views

MAL-2022-3734 Malicious code in hydra-jekyll-bookshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61806f0286661ce99dd8fb9aa65389df9cf4596c31a083cbf1397726c35f4b3d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
The Hacker News
The Hacker News
•added 2022/06/01 1:34 p.m.•32 views

FluBot Android Spyware Taken Down in Global Law Enforcement Operation

An international law enforcement operation involving 11 countries has culminated in the takedown of a notorious mobile malware threat called FluBot. "This Android malware has been spreading aggressively through SMS, stealing passwords, online banking details and other sensitive information from...

0.5AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2022/05/31 12:42 p.m.•45 views

Latest Mobile Malware Report Suggests On-Device Fraud is on the Rise

An analysis of the mobile threat landscape in 2022 shows that Spain and Turkey are the most targeted countries for malware campaigns, even as a mix of new and existing banking trojans are increasingly targeting Android devices to conduct on-device fraud ODF. Other frequently targeted countries...

0.9AI score
SaveExploits0
OSV
OSV
•added 2022/05/14 1:33 a.m.•15 views

GHSA-7V6R-W4R6-MHCH Hydra has Reflected XSS via error_hint parameter

ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error errorhint parameter...

6.1CVSS6.3AI score0.01328EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
•added 2022/05/14 1:33 a.m.•18 views

Hydra has Reflected XSS via error_hint parameter

ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error errorhint parameter...

6.1CVSS6.4AI score0.01328EPSS
SaveExploits1References7Affected Software1
The Hacker News
The Hacker News
•added 2022/04/06 7:29 a.m.•39 views

U.S. Treasury Department Sanctions Russia-based Hydra Darknet Marketplace

The U.S. Treasury Department on Tuesday sanctioned Hydra, the same day German law enforcement authorities disrupted the world's largest and longest-running dark web marketplace following a coordinated operation in partnership with U.S. officials. The sanctions are part of an "international effort...

0.8AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
•added 2022/04/05 7:27 p.m.•15 views

Shutdown of Russia's Hydra Market Disrupts a Crypto-Crime ATM

More than just a market for illegal drugs, the dark-web site allowed criminals to launder or cash out hundreds of millions in stolen cryptocurrencies...

2.4AI score
SaveExploits0
ThreatPost
ThreatPost
•added 2022/04/05 5:53 p.m.•143 views

Authorities Fully Behead Hydra Dark Marketplace

German authorities have taken down the Hydra marketplace – a popular destination on the Dark Web for trading in illicit goods and services, including cyberattack tools and stolen data. This week, they were able to commandeer and take offline underpinning infrastructure such as servers, plus insta...

8.6AI score
SaveExploits0References7
HackRead
HackRead
•added 2022/04/05 4:10 p.m.•23 views

Germany Shuts Down Russian Dark Web Market Hydra; Seizes $25M in BTC

By Waqas On Tuesday, April 5th, Germanys Federal Criminal Police Office Bundeskriminalamt announced the seizure and closure of the worlds largest Russian… This is a post from HackRead.com Read the original post: Germany Shuts Down Russian Dark Web Market Hydra; Seizes $25M in BTC...

1AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2022/04/05 11:05 a.m.•58 views

Germany Shuts Down Russian Hydra Darknet Market; Seizes $25 Million in Bitcoin

Germany's Federal Criminal Police Office, the Bundeskriminalamt BKA, on Tuesday announced the official takedown of Hydra, the world's largest illegal dark web marketplace that has cumulatively facilitated over $5 billion in Bitcoin transactions to date. "Bitcoins amounting to currently the...

0.2AI score
SaveExploits0
Krebs on Security
Krebs on Security
•added 2022/03/22 4:33 p.m.•26 views

‘Spam Nation’ Villain Vrublevsky Charged With Fraud

Pavel Vrublevsky, founder of the Russian payment technology firm ChronoPay and the antagonist in my 2014 book "Spam Nation," was arrested in Moscow this month and charged with fraud. Russian authorities allege Vrublevsky operated several fraudulent SMS-based payment schemes, and facilitated money...

0.6AI score
SaveExploits0
Rows per page
Query Builder