10251 matches found
Surge in 8Base Ransomware Group Activity
Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary 8Base Ransomware group define themselves as “honest and simple pentesters”, have spiked their activities recently and was observed to be within the top 2 performing ransom groups. To receive real-time...
MAL-2023-1407 Malicious code in servantcord (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a573def8d25965b25ab7e80b187bc35973c3015d0a23b2c0f8298d800d97a1a2 The OpenSSF Package Analysis project identified 'servantcord' @ 1.0.2 pypi as malicious. It is considered malicious because: - The package...
SAMSUNG Mobile devices 输入验证错误漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. An input validation error vulnerability exists in SAMSUNG Mobile devices SMR Jul-2023 Release 1 prior to Release 1. The vulnerability stems from the...
MAL-2023-1248 Malicious code in ng-file-upload-shim (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 51cd8a582b38d577b6dc6deb3879019bd0b0c68ae7e5bf23d787aa2721e6e334 The OpenSSF Package Analysis project identified 'ng-file-upload-shim' @ 12.0.4 npm as malicious. It is considered malicious because: - The packa...
MAL-2023-1338 Malicious code in vote-chatbot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19c7207472bfc0beece07f85734b2c399c40fc27dd1cfac03ca92492bbbc7cad The OpenSSF Package Analysis project identified 'vote-chatbot' @ 47.47.48 npm as malicious. It is considered malicious because: - The package...
Malicious code in vote-chatbot (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 19c7207472bfc0beece07f85734b2c399c40fc27dd1cfac03ca92492bbbc7cad The OpenSSF Package Analysis project identified 'vote-chatbot' @ 47.47.48 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1336 Malicious code in videosdk-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis da3ca7587089ca66e194fccd2af2ed17b7a7de7db4445c0aedb8c72fe70d60e6 The OpenSSF Package Analysis project identified 'videosdk-web' @ 47.47.48 npm as malicious. It is considered malicious because: - The package...
Malicious code in videosdk-web (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis da3ca7587089ca66e194fccd2af2ed17b7a7de7db4445c0aedb8c72fe70d60e6 The OpenSSF Package Analysis project identified 'videosdk-web' @ 47.47.48 npm as malicious. It is considered malicious because: - The package...
MAL-2023-587 Malicious code in meetingsdk-sample-react (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b35b4caef11623ed6a19de27a6ca20f776482dc18bfe6fb11b3d852adb69eed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-1321 Malicious code in thentiacloud-angularjs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 080925c1a04cb601b6c5a204f7e8db92592ee52721272a7effa1eb5caf5207c8 The OpenSSF Package Analysis project identified 'thentiacloud-angularjs' @ 1.2.0 npm as malicious. It is considered malicious because: - The...
User Activity Log < 1.6.3 - Admin+ SQL Injection
The plugin does not properly sanitise and escape the txtsearch parameter before using it in a SQL statement in some admin pages, leading to a SQL injection exploitable by high privilege users such as admin. PoC As an admin, visit either of the following URL's. Note that it takes several seconds f...
User Activity Log < 1.6.3 - Admin+ SQL Injection
The plugin does not properly sanitise and escape the txtsearch parameter before using it in a SQL statement in some admin pages, leading to a SQL injection exploitable by high privilege users such as admin. As an admin, visit either of the following URL's. Note that it takes several seconds for t...
MAL-2023-621 Malicious code in next-with-frontegg (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 251ac37afbe61350facc80a00faa97821168ad425857f580f6fa33910fbd78eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
[SECURITY] Fedora 38 Update: sysstat-12.7.4-1.fc38
The sysstat package contains the sar, sadf, mpstat, iostat, tapestat, pidstat, cifsiostat and sa tools for Linux. The sar command collects and reports system activity information. The information collected by sar can be saved in a file in a binary format for future inspection. The statistics...
MAL-2023-1167 Malicious code in dreamotp1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis d32ee7888ccbfab9c37e855e72a334e3fc63f65383d2e0ab391428f91ab61bf7 The OpenSSF Package Analysis project identified 'dreamotp1' @ 17.2.2 npm as malicious. It is considered malicious because: - The package...
CVE-2023-32622
creationtimestamp| type| source ---|---|--- 2023-06-30 12:15:08+00:00| seen| https://t.me/cibsecurity/65777...
MAL-2023-1288 Malicious code in schweppes (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c6413b14065c0dae4dd031864f7a515ead037541f7f74a2907a2d554ebe4e7fe The OpenSSF Package Analysis project identified 'schweppes' @ 1.0.2 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1219 Malicious code in jquery-overscroll (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 279b9014e86c11c82ac819b5e3bbbbbfc2868e3131b65bd941e60d08985cfbb0 The OpenSSF Package Analysis project identified 'jquery-overscroll' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...
