Code injection

ShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of CODESIGNINGINJECTBASEENTITLEMENTS...

CVE-2022-38738

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none...

PUB-A-229255400

Bulletin has no description...

MAL-2023-3033 Malicious code in esqkillramed (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8e24e78af9a114e8ff65596ec1ff04f8f51de197808200ac08e477a9ae588d26 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2964 Malicious code in esqhttpvmurl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b110506eaac9840a464a211ec64f23d7fde95b941efb3feb7bec64d23d10aed2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3434 Malicious code in esqstrintelsplit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 44bd8c9c505aac9a3c0174a080649b232991699c662a0bf2a4f4b7506e895a89 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5228 Malicious code in py-intelgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx eb511632e871dda789a0ef10c17c89b0ec71241a8287ae4344459a74a654ef87 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5288 Malicious code in py-libhttpmc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 64fa61806e69f032bf9107fa0873b97cd7311226a1b7bdb3382af641e4c9a78e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3233 Malicious code in esqpostlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6c4fe1c89594aa0ac9f03ba82f99cbce6d30d9e3023a45cdf22dfdb3d0302794 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6045 Malicious code in selfencodecv (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f78c01fcc92f4260482ab541769e9efbb1727207c1564ef0f3654661cfa06715 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6801 Malicious code in selfvmreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3b31cd9aa51275ec76fde8e45529048960b926f0f3c7670dda9773cee19e58da EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3405 Malicious code in esqsplitpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b3f11c6e018c5a1321a3fbdbc4aa72e0a614634e2949a315ac9269574c5d20df EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5175 Malicious code in py-httpencode (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4d9ff6419a8de217d90b560650745f4d33d9c4da75c3690507ba058b018d2ae8 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4808 Malicious code in osintrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 75f0f4e41eb5b3d4b9381ea1d7f4ba29d5b618bb166fe2a835def6149243587f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3841 Malicious code in killpyw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 18f7bad9fc9508b375141f54903d976457da567ca719246fe279095a0462dd46 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-7832 Malicious code in virtualram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 10efabece90985da1f702890a1e1e1d25110790c5153ff24a1632ab12ed5605c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Batteries Are Ukraine’s Secret Weapon Against Russia

With Russia regularly knocking out Ukraine’s power grid, the country has turned to high-capacity batteries to keep it connected to the world—and itself...

CVE-2023-0884

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2022-3759. Reason: This candidate is a reservation duplicate of CVE-2022-3759. Notes: All CVE users should reference CVE-2022-3759 instead of this candidate. All references and descriptions in this candidate have been removed to...

CVE-2017-1038

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2017. Notes: none...

Google Reveals Alarming Surge in Russian Cyber Attacks Against Ukraine

Russia's cyber attacks against Ukraine surged by 250% in 2022 when compared to two years ago, Google's Threat Analysis Group TAG and Mandiant disclosed in a new joint report. The targeting, which coincided and has since persisted following the country's military invasion of Ukraine in February...