Crazy Evil Gang Targets Crypto with StealC, AMOS, and Angel Drainer Malware

A Russian-speaking cybercrime gang known as Crazy Evil has been linked to over 10 active social media scams that leverage a wide range of tailored lures to deceive victims and trick them into installing malware such as StealC, Atomic macOS Stealer aka AMOS, and Angel Drainer. "Specializing in...

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system by Angel Jude Reyes Suarez, an individual developer. A security vulnerability exists in Insurance Management System version 1.0. An attacker exploited the vulnerability to perform a cross-site request forgery attack...

MAL-2024-6606 Malicious code in angel-list (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

WordPress Shield Security plugin <= 19.1.10 - Cross-Site Request Forgery vulnerability

Cross-Site Request Forgery vulnerability discovered by Christian Angel in WordPress Plugin Shield Security versions = 19.1.10...

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system by the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions, which stems from a cross-site scripting XSS vulnerability in the Last Name field...

Insurance Management System 安全漏洞

Insurance Management System is an insurance management system from the individual developer Angel Jude Reyes Suarez. A security vulnerability exists in Insurance Management System v.1.0.0 and prior versions that stems from a cross-site scripting XSS vulnerability in the City field...

CVE-2023-48133

An issue in angel coffee mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48133

An issue in angel coffee mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

Code injection

An issue in angel coffee mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48133

An issue in angel coffee mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

CVE-2023-48133

CVE-2023-48133 affects Line’s angel coffee mini-app (Line v13.6.1). The underlying issue is leakage of the channel access token, enabling attackers to send crafted malicious notifications. CVSS: Network attack, low complexity, low privileges, no user interaction, confidentiality/integrity impact ...

PT-2024-13549 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the angel coffee mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system. Recommendations: Fo...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which stems from the angel coffee applet that may disclose access tokens...

Beware: Scam-as-a-Service Aiding Cybercriminals in Crypto Wallet-Draining Attacks

Cybersecurity researchers are warning about an increase in phishing attacks that are capable of draining cryptocurrency wallets. "These threats are unique in their approach, targeting a wide range of blockchain networks, from Ethereum and Binance Smart Chain to Polygon, Avalanche, and almost 20...

HackerOne: How the Arch Angel stole Live Events

A vulnerability in a live hacking event's infrastructure allowed an attacker to impersonate an administrator, close valid bug reports, and disrupt the event. The attacker was able to log in as an administrator and invalidate bug reports, but the event proceeded successfully regardless...

angel-jt.com Improper Access Control vulnerability OBB-3792963

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hotelmiguelangel.com Cross Site Scripting vulnerability OBB-3615086

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2023-275 Malicious code in dow-load-bound-to-the-past-stronghold-5-by-golden-angel-on-textbook-new-edition- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f27534f61fe998b24891e900eee38f6e2897120c4bf7c40bf3f41abe8f46d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-140 Malicious code in bound-to-the-past-stronghold-5-by-golden-angel-on-textbook-new-edition- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c2a2c44d99a498d4ef01c5298b14a9eb8bc90d2d2613d1ed92da9390469d4fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

angel-dog.co.jp Cross Site Scripting vulnerability OBB-3207722

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...