157 matches found
MAL-2025-33255 Malicious code in silk-wadic-70udd-amber-project (npm)
The package silk-wadic-70udd-amber-project was found to contain malicious code...
MAL-2025-31475 Malicious code in radiance-0d0hn-q9m3l-silk-project (npm)
The package radiance-0d0hn-q9m3l-silk-project was found to contain malicious code...
Chinese Firms Linked to Silk Typhoon Filed 15+ Patents for Cyber Espionage Tools
Chinese companies linked to the state-sponsored hacking group known as Silk Typhoon aka Hafnium have been identified as behind over a dozen technology patents, shedding light on the shadowy cyber contracting ecosystem and its offensive capabilities. The patents cover forensics and intrusion tools...
Chinese Hacker Xu Zewei Arrested for Ties to Silk Typhoon Group and U.S. Cyber Attacks
A Chinese national has been arrested in Milan, Italy, for his alleged links to a state-sponsored hacking group known as Silk Typhoon and for carrying out cyber attacks against American organizations and government agencies. The 33-year-old, Xu Zewei , has been charged with nine counts of wire fra...
Ross Ulbricht Got a $31 Million Donation From a Dark Web Dealer, Crypto Tracers Suspect
Crypto-tracing firm Chainalysis says the mysterious 300-bitcoin donation to the pardoned Silk Road creator appears to have come from someone associated with a different defunct black market: AlphaBay...
CVE-2014-125088
A vulnerability was found in qt-users-jp silk 0.0.1. It has been declared as problematic. This vulnerability affects unknown code of the file contents/root/examples/header.qml. The manipulation of the argument model.key/model.value leads to cross site scripting. The attack can be initiated...
Silk Typhoon Hackers Indicted
Lots of interesting details in the story: The US Department of Justice on Wednesday announced the indictment of 12 Chinese individuals accused of more than a decade of hacker intrusions around the world, including eight staffers for the contractor i-Soon, two officials at China's Ministry of Publ...
China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial Access
The China-linked threat actor behind the zero-day exploitation of security flaws in Microsoft Exchange servers in January 2021 has shifted its tactics to target the information technology IT supply chain as a means to obtain initial access to corporate networks. That's according to new findings...
Silk Typhoon targeting IT supply chain
Executive summary: Microsoft Threat Intelligence identified a shift in tactics by Silk Typhoon, a Chinese espionage group, now targeting common IT solutions like remote management tools and cloud applications to gain initial access. While they haven't been observed directly targeting Microsoft...
Trump Pardons Silk Road Founder Ross Ulbricht, Calls Prosecutors ‘Scum’
President Trump pardons Silk Road founder Ross Ulbricht, slamming prosecutors as "scum." The move reignites debates on cybercrime…...
President Trump Pardons Silk Road Creator Ross Ulbricht After 11 Years in Prison
U.S. President Donald Trump on Tuesday granted a "full and unconditional pardon" to Ross Ulbricht, the creator of the infamous Silk Road drug marketplace, after spending more than 11 years behind bars. "I just called the mother of Ross William Ulbricht to let her know that in honor of her and the...
Trump Frees Silk Road Creator Ross Ulbricht After 11 Years in Prison
Donald Trump pardoned the creator of the world’s first dark-web drug market, who is now a libertarian cause célèbre in some parts of the crypto community...
silk-tool.de Cross Site Scripting vulnerability OBB-3587550
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Silk Road’s Second-in-Command, Variety Jones, Gets 20 Years in Prison
Roger Thomas Clark, also known as Variety Jones, will spend much of the rest of his life in prison for his key role in building the world’s first dark-web drug market...
CVE-2014-125088
A vulnerability was found in qt-users-jp silk 0.0.1. It has been declared as problematic. This vulnerability affects unknown code of the file contents/root/examples/header.qml. The manipulation of the argument model.key/model.value leads to cross site scripting. The attack can be initiated...
Cross site scripting
A vulnerability was found in qt-users-jp silk 0.0.1. It has been declared as problematic. This vulnerability affects unknown code of the file contents/root/examples/header.qml. The manipulation of the argument model.key/model.value leads to cross site scripting. The attack can be initiated...
CVE-2014-125088 qt-users-jp silk header.qml cross site scripting
A vulnerability was found in qt-users-jp silk 0.0.1. It has been declared as problematic. This vulnerability affects unknown code of the file contents/root/examples/header.qml. The manipulation of the argument model.key/model.value leads to cross site scripting. The attack can be initiated...
CVE-2014-125088
CVE-2014-125088 affects qt-users-jp silk 0.0.1, specifically the file contents/root/examples/header.qml. The vulnerability arises from manipulation of the arguments model.key / model.value, enabling cross-site scripting and permitting remote initiation. A patch named bb c5d6eeea800025ef29edda3fd3...
qt-users-jp silk 跨站脚本漏洞
silk is qt-users-jp open source a simple and flexible web framework . A cross-site scripting vulnerability exists in qt-users-jp silk version 0.0.1, which stems from a problem with the unknown code in the file /root/examples/header.qml, where manipulation of the parameter model.key/model.value ca...
PT-2023-10156 · Unknown · Qt-Users-Jp Silk
Name of the Vulnerable Software and Affected Versions: qt-users-jp silk version 0.0.1 Description: A problem was found in the file contents/root/examples/header.qml. The manipulation of the model.key and model.value arguments leads to cross-site scripting. The attack can be initiated remotely...