598 matches found
Malicious code in pyyaml-selenium (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9582f8c7828335bcf6299260ea76656239fbbc52addbad1db96f04025109ead7 The OpenSSF Package Analysis project identified 'pyyaml-selenium' @ 1.15.3 pypi as malicious. It is considered malicious because: - The package...
MAL-2023-1398 Malicious code in pyyaml-selenium (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 9582f8c7828335bcf6299260ea76656239fbbc52addbad1db96f04025109ead7 The OpenSSF Package Analysis project identified 'pyyaml-selenium' @ 1.15.3 pypi as malicious. It is considered malicious because: - The package...
MAL-2023-1417 Malicious code in sys-selenium (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1ae15b4cab934fe2bdb8472ceb8f00edfd582688a810321e7e4814ca66cbe98 The OpenSSF Package Analysis project identified 'sys-selenium' @ 9.1.9 pypi as malicious. It is considered malicious because: - The package...
Malicious code in sys-selenium (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a1ae15b4cab934fe2bdb8472ceb8f00edfd582688a810321e7e4814ca66cbe98 The OpenSSF Package Analysis project identified 'sys-selenium' @ 9.1.9 pypi as malicious. It is considered malicious because: - The package...
Swagger UI 4.1.3 - User Interface (UI) Misrepresentation of Critical Information Exploit
Exploit Title: Swagger UI 4.1.3 - User Interface UI Misrepresentation of Critical Information Exploit Author: Rafael Cintra Lopes Vendor Homepage: https://swagger.io/ Version: 4.1.3 CVE: CVE-2018-25031 Site: https://rafaelcintralopes.com.br/ Usage: python swagger-exploit.py https://swagger-page.c...
Swagger UI 4.1.3 - User Interface (UI) Misrepresentation of Critical Information
Exploit Title: Swagger UI 4.1.3 - User Interface UI Misrepresentation of Critical Information Date: 14 April, 2023 Exploit Author: Rafael Cintra Lopes Vendor Homepage: https://swagger.io/ Version: 4.1.3 CVE: CVE-2018-25031 Site: https://rafaelcintralopes.com.br/ Usage: python swagger-exploit.py...
Swagger UI 4.1.3 Critical Information Misrepresentation
Exploit Title: Swagger UI 4.1.3 - User Interface UI Misrepresentation of Critical Information Date: 14 April, 2023 Exploit Author: Rafael Cintra Lopes Vendor Homepage: https://swagger.io/ Version: 4.1.3 CVE: CVE-2018-25031 Site: https://rafaelcintralopes.com.br/ Usage: python swagger-exploit.py...
Security Bulletin: Multiple vulnerabilities of Mozilla Firefox (less than Firefox 102.8ESR) have affected APM Synthetic Playback Agent
Summary APM Synthetic Playback Agent is vulnerable to Firefox ESR CVE-2023-25730, CVE-2023-25729, CVE-2023-25742, CVE-2023-25734, CVE-2023-25738, CVE-2023-25728 . Firefox ESR is used by APM Synthetic Playback Agent for running the selenium scripts. The fix includes support for Firefox 102.8 ESR...
Malicious code in seleinum (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 05d2793b08bdbaa90731b8446c6ccbc0df25d3f8af81011bd03a2d85cf31dbd8 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-2232 Malicious code in seleenium (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx aedef854e63388485e0620f494cfcc557ed77d34b4296216ea869ba2cddec80b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-2237 Malicious code in seleniumm (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 96e73b8d4e768674f465eb608ffe826d16e12fe10dff319ca4502a911208368b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-2239 Malicious code in selennium (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx b37dc0abadd5b8fa7690a61c9c627118f236dbee818f2247603b13f315477135 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
Malicious code in selneium (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 04716a203cb75d052f01120c13a77fff61bcf1d505aae7060df346252215800a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-2236 Malicious code in seleniu (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 50cae7a9929f863c1a164a53e398eeec4a76e6d3918c59e7b1628c8e9f1e9f3d Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
Troubleshooting InsightAppSec Authentication Issues
For complete visibility into the vulnerabilities in your environment, proper authentication to web apps in InsightAppSec is essential. In this article, we’ll look at issues you might encounter with macro, traffic, and selenium authentication and how to troubleshoot them. Additionally, you’ll get...
Jenkins Selenium HTML Report Plugin XML External Entity Injection (CVE-2021-21672)
An XML external entity injection vulnerability exists in Jenkins Selenium HTML Report Plugin. Successful exploitation of this vulnerability could result in the disclosure of file contents from the target system...
Bayanay - Python Wardriving Tool
WarDriving is the act of navigating, on foot or by car, to discover wireless networks in the surrounding area. Features Wardriving is done by combining the SSID information obtained with scapy using the HTML5 geolocation feature. Usage I cannot be held responsible for the malicious use of the...
Exploit for Code Injection in Combodo Itop
iTop RCE via SSTI - CVE-2022-24780 exploit iTop --debu...