MAL-2023-2492 Malicious code in adosint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 08dbad40412187aa7269a5c9af4334795553b817356d17633aa77627ee66ad27 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5877 Malicious code in randintel (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx df04ff1d7307c7ec3b3f449b9c29227f42efa0a8abc20ff6f8c50e8554242838 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4894 Malicious code in pongrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 491048d0f0e365fba5b4e4aaaaa041afaa30ede92103716ccc16047c8a28368e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

visitsiauliai.lt Cross Site Scripting vulnerability OBB-3206240

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2023-3684 Malicious code in guihydra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 60196ca9446caa81b93596499dcfcc0cf052bf0eeb5379b6b5955d7450c51f89 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in ccre (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6cfa3bae1c245d888b25a3b44366aae7e565e393b172201508f0503f4d2f5c32 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5869 Malicious code in ramultra (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b598aa6ca0fa2eac0f1afc111c7b55877464f1303c177de5445bdf9baee03a79 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6883 Malicious code in toolmask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 98cce274aba542e25d6b6e0faf4a8a1adb07cdb32d109c054f29655088c4f2a1 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7822 Malicious code in virtualgui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b6f6ef76608c7cff621c8c77cd71026024d232d23e45a9baeac573bdd8970359 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2573 Malicious code in controlcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b407b24533744de6be95e0e8160011cbeccb3e73136a45f1400d33711bf0a9f8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

worldofchemicals.com Cross Site Scripting vulnerability OBB-3206079

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

weserradweg-info.de Cross Site Scripting vulnerability OBB-3206029

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bauklimatik-dresden.de Cross Site Scripting vulnerability OBB-3206025

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

meckenbach.de Cross Site Scripting vulnerability OBB-3205962

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ussur.net Cross Site Scripting vulnerability OBB-3205645

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Zendrop – Global Dropshipping Plugin <= 1.0.0 is vulnerable to Arbitrary File Upload

Software Zendrop – Global Dropshipping Type Plugin Vulnerable versions = 1.0.0 Fixed in 1.0.1 OWASP Top 10 A2: Broken Authentication Classification Arbitrary File Upload CVE CVE-2023-25970 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 180f30af21a8 Credits Dave Jong...

WordPress YouTube Channel Plugin <= 3.23.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software YouTube Channel Type Plugin Vulnerable versions = 3.23.3 Fixed in 3.23.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-25987 Patch priority Low CVSS severity Low 4.3 Developer Aleksandar Urošević PSID fad79021f069 Credits Mika Required...

WordPress Apollo13 Framework Extensions Plugin <= 1.8.10 is vulnerable to Broken Access Control

Software Apollo13 Framework Extensions Type Plugin Vulnerable versions = 1.8.10 Fixed in 1.9.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-25959 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e663c34e63b0 Credits István Márton...

MAL-2023-7883 Malicious code in vmmine (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a28e36cd416b75db430037116b5f924a03753c6338e7ce6696b0810c710c0713 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4869 Malicious code in pipload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0862963af5da5d6a8bfb661718b7cfd0d10bc3d19a53e934939b13bc12482e6c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...