Malicious code in libcontrolultrastudy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 88823913361c3354ced32f533c991c7bf1df869aa1510f132f0b650fab73fbd9 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-stringvisarand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 535c6fa827e6941c15a97b6b6d92815921414b74e19ac0f9fd1f11b1828bc4e6 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libregame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2d0932d3e748c4282e171482c2090e92f337013c6692648eb45480528b2505f6 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-cvvisacpu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7e531e479fa036d3042771f8f35d555bd3b7832b4429e26f8b7a8162cd4248a7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpostcandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 48a73549a13fe20343efd56fb2333d7b1220b2f2d1f961e7393bfaace0e29717 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqinfostr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 983101cb244c1deaf1c24b98fe899afd9016b47f349d70e2bc0977148be59d9b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in ultraproof (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3b562629d8cc8c65ba50e04c84a11d56d36e53dbbb191aa5a8b2c238dbd91dad EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in loadgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7de7f2bee6145c2961599e3554d87c37facff72ef1c13ba2dd03ca04bd80de42 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

PT-2023-16646 · Unknown · Sourcecodester Music Gallery Site

Name of the Vulnerable Software and Affected Versions: SourceCodester Music Gallery Site version 1.0 Description: A critical issue has been found in the SourceCodester Music Gallery Site, affecting the Master.php file of the GET Request Handler component. The manipulation of the id argument leads...

CVE-2023-24080

A lack of rate limiting on the password reset endpoint of Chamberlain myQ v5.222.0.32277 on iOS allows attackers to compromise user accounts via a bruteforce attack...

sudo: arbitrary file write with privileges of the RunAs user

A vulnerability was found in sudo. Exposure in how sudoedit handles user-provided environment variables leads to arbitrary file writing with privileges of the RunAs user usually root. The prerequisite for exploitation is that the current user must be authorized by the sudoers policy to edit a fil...

GeoServer SQL注入漏洞

GeoServer is an open source software server written in Java. It allows users to share and edit geospatial data. A security vulnerability exists in GeoServer versions prior to 2.21.4, 2.22.2 and 2.22.2, which stems from abuse of strEndsWith, strStartsWith and PropertyIsLike...

Mozilla: Screen hijack via browser fullscreen mode

The Mozilla Foundation Security Advisory describes this flaw as: A background script invoking requestFullscreen and then blocking the main thread could force the browser into fullscreen mode indefinitely, resulting in potential user confusion or spoofing attacks...

CVE-2023-0882

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse. This issue affects Single Connect: 2.16...

CVE-2023-0882

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse. This issue affects Single Connect: 2.16...

Authorization

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse. This issue affects Single Connect: 2.16...

CVE-2023-0882 Authorization Bypass Through User-Controlled Key on Single Connect

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse. This issue affects Single Connect: 2.16...

CVE-2023-0882

Kron Tech Single Connect (Windows) version 2.16 is affected by an Improper Input Validation and Authorization Bypass via a User-Controlled Key, enabling Privilege Abuse. The issue is described across sources as affecting Single Connect: 2.16, with no explicit exploit details provided in the docum...

CVE-2023-0882 Authorization Bypass Through User-Controlled Key on Single Connect

Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse. This issue affects Single Connect: 2.16...

PT-2023-16585

Name of the Vulnerable Software and Affected Versions Kron Tech Single Connect version 2.16 Description The issue is related to Improper Input Validation and Authorization Bypass Through User-Controlled Key, allowing Privilege Abuse in Kron Tech Single Connect on Windows. Recommendations For...