Malicious code in redis-di-processor (PyPI)

Source: kam193 d6942290379335757f0deff6d17e2490cd1b47f426b3f1fb533766ab804aa6cb The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. --- Category: PROBABLYPENTEST - Packages looking like typical...

Malicious code in formatter-test-package (PyPI)

Source: kam193 8ad808b5e90e246a93704f922e2dd59bf4c5954fdfc55ccf5371c6b13ac7483f The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. --- Category: PROBABLYPENTEST - Packages looking like typical...

Malicious code in confluent-docker-utils (PyPI)

Source: kam193 bc7d66b033c3d09c07ce3226cd534199a9f8cb2200a79035526192fb140b94d9 The package is designed to exfiltrate basic data, like hostname and OS details, as well as collect information about the stacktrace it's imported from. --- Category: PROBABLYPENTEST - Packages looking like typical...

Windows Gather System Information

Enumerates Windows system information including OS details, users, processes, services, network configuration, and security settings !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import import re class ModulePost: """Windows System Enumeration Module""" info = "name": "Windows Gather...

CVE-2019-19084

In Octopus Deploy 3.3.0 through 2019.10.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted package, triggering an exception that exposes underlying operating system details...

Aspen: Information leakage on django.aspen.io

Hi Team, I got a error message that disclose the version of nginx with OS detail, since The version of nginx is vulnerable to integer overflow. Impact: By seeing this information attacker can throw only interger overflow attack in order to get sensitive information Finally Request you to remove...

jsDelivr: Using nmap revealing sensitive information

check this = http://prntscr.com/3xlww2 nmap scan result . Starting Nmap 6.46 http://nmap.org at 2014-06-29 15:34 India Standard Time NSE: Loaded 30 scripts for scanning. NSE: Script Pre-scanning. Initiating Parallel DNS resolution of 1 host. at 15:35 Completed Parallel DNS resolution of 1 host. a...

IBM Lotus Domino HTTP Server Filesystem Setup Disclosure

It is possible to get the absolute path leading to the remote /cgi-bin directory by requesting a bogus cgi. This issue can be used to obtain OS and installation details. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...