aquatic (0.2.0), aquatic_http (0.2.0) +159 more potentially affected by unknown CVE via owned-alloc (0.2.0)

owned-alloc CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on owned-alloc and may be impacted: - aquatic 0.2.0 - aquatichttp 0.2.0 - aquatichttploadtest 0.2.0 - aquaticws 0.2.0 - aquaticwsloadtest 0.2.0 - asyncexecutors =0.6.0, =1.0.0...

aquatic (0.2.0), aquatic_http (0.2.0) +159 more potentially affected by unknown CVE via owned-alloc (0.2.0)

owned-alloc CARGO version 0.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on owned-alloc and may be impacted: - aquatic 0.2.0 - aquatichttp 0.2.0 - aquatichttploadtest 0.2.0 - aquaticws 0.2.0 - aquaticwsloadtest 0.2.0 - asyncexecutors =0.6.0, =1.0.0...

aquatic (0.2.0), aquatic_http (0.2.0) +158 more potentially affected by unknown CVE via lockfree (0.5.1)

lockfree CARGO version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on lockfree and may be impacted: - aquatic 0.2.0 - aquatichttp 0.2.0 - aquatichttploadtest 0.2.0 - aquaticws 0.2.0 - aquaticwsloadtest 0.2.0 - asyncexecutors =0.6.0, =1.0.0,...

China-Linked APT Aquatic Panda: 10-Month Campaign, 7 Global Targets, 5 Malware Families

The China-linked advanced persistent threat APT group known as Aquatic Panda has been linked to a "global espionage campaign" that took place in 2022 targeting seven organizations. These entities include governments, Catholic charities, non-governmental organizations NGOs, and think tanks across...

Malware in availab-le-alb-um-zip-25931-the-life-aquatic-studio-sessions-mocn6-tnmvnd

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

APT ‘Aquatic Panda’ Targets Universities with Log4Shell Exploit Tools

Cyber criminals, under the moniker Aquatic Panda, are the latest advanced persistent threat group APT to exploit the Log4Shell vulnerability. Researchers from CrowdStrike Falcon OverWatch recently disrupted the threat actors using Log4Shell exploit tools on a vulnerable VMware installation during...

Chinese APT Hackers Used Log4Shell Exploit to Target Academic Institution

A never-before-seen China-based targeted intrusion adversary dubbed Aquatic Panda has been observed leveraging critical flaws in the Apache Log4j logging library as an access vector to perform various post-exploitation operations, including reconnaissance and credential harvesting on targeted...

marylandaquatic.com XSS vulnerability

Open Bug Bounty ID: OBB-466475 Description| Value ---|--- Affected Website:| marylandaquatic.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Che...