PT-2024-30478 · Geek Code · Geek Code Lab Login As Users

Name of the Vulnerable Software and Affected Versions: Geek Code Lab Login As Users versions 1.4.2 and earlier Description: The issue is related to Improper Privilege Management, allowing Privilege Escalation. This can be exploited in the Login As Users feature. Recommendations: For versions 1.4....

WordPress WP-Lister Lite for eBay Plugin <= 3.6.0 is vulnerable to Cross Site Scripting (XSS)

Software WP-Lister Lite for eBay Type Plugin Vulnerable versions = 3.6.0 Fixed in 3.6.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-43306 Patch priority Medium CVSS severity Medium 7.1 Developer WP Lab PSID d4c17ecc0795 Credits LVT-tholv2k Required privilege...

CVE-2024-25633

CVE-2024-25633 affects eLabFTW, where versions 4.4.0 up to (and not including) 5.0.0 allow regular users to create new, validated accounts within their team. If anonymous access is enabled, unauthenticated users can create accounts in any team. The issue was fixed starting with version 5.0.0 (Feb...

Russian-Linked Hackers Target Eastern European NGOs and Media

Russian and Belarusian non-profit organizations, Russian independent media, and international non-governmental organizations active in Eastern Europe have become the target of two separate spear-phishing campaigns orchestrated by threat actors whose interests align with that of the Russian...

Imperva Security Efficacy and Operational Efficiency Leads the Industry in SecureIQLab’s Cloud WAAP Comparative Report

In the 2024 Cloud Web Application and API Protection WAAP CyberRisk Comparative Validation Report from SecureIQLab, Imperva outperformed all other vendors in both security efficacy and operational efficiency. This comprehensive report, based on third-party testing, demonstrates Imperva's commitme...

MAL-2024-11527 Malicious code in artifact-lab-3-package-b1ec2b9f (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3fe49cb6b5b199c213d54391901382790a3d9663bd90bf78361f07c594160fa6 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8051 Malicious code in artifact-lab-3-package-3eef6c2c (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2325acb67ca59e847fd003a5449350d2b0b12620ed80cb82cc6189f091bdacc7 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8048 Malicious code in artifact-lab-3-package-76a351f5 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ffd940df08afab8ca93f472de627c4cc633b5de2d3331b58a84602a882390ac1 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8046 Malicious code in artifact-lab-3-package-89883da3 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dc3109f451995d11f0f2e99d58397d06ac2bb036df5ceb90425befb54ea10f14 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8044 Malicious code in artifact-lab-3-package-2b6a4744 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0c03451c46b9f1a6e1a2ad4df4b3919782e86a4879fa78b7967ae7ec3e694645 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8914 Malicious code in artifact-lab-3-package-4c04b1a2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 73c351156cf1e0c234b98d0e640c60c93c88c92d42109fe64cbb83dd68e82375 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8927 Malicious code in artifact-lab-3-package-db7d716a (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ba3dfc0be54b4fdd3d2d352e658210ad3d22d1108a4d1406320394a55e498f10 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-9451 Malicious code in artifact-lab-3-package-24ddbc49 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 74150a24eb8c9d6a2c36b221818de2b3564a62629444438ef666be89914c4c3b Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in artifact-lab-3-package-b6920ef4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0239eb42a339ea04c20285cf4f4fd719e841f19d6e59a2cbb78f6e982fcea446 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8045 Malicious code in artifact-lab-3-package-ccd28738 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5da429dcc2bd3c0de786f149b4b510b2aebb23e894f5eaea3f80812b8241dd6a Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

MAL-2024-8026 Malicious code in artifact-lab-3-package-9fde789f (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f494a5211d4ea10a131bb54919b6d5e1bf765cea0c3cc018c054e7e304f5856f Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in artifact-lab-3-package-7e532784 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d93531e3b6c6c54a9029303ec3f20394fe8268775978e1b13754c318486c88cc Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in artifact-lab-3-package-76a351f5 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ffd940df08afab8ca93f472de627c4cc633b5de2d3331b58a84602a882390ac1 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in artifact-lab-3-package-b1ec2b9f (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3fe49cb6b5b199c213d54391901382790a3d9663bd90bf78361f07c594160fa6 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...

Malicious code in artifact-lab-3-package-b55680cd (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 be4896eebe0a6b7185d165cec1e593faea8a14a8b2386711ef9c08657273bb31 Packages showing simple variants of revshell with targets to ngrok. Most probably experiments. Later versions moved to use Burp Collaborator to exfiltrate simp...