ASOS breach update: Hackers stole customer details and shopping searches

The customer data stolen from global fashion retailer ASOS includes more than just names and contact details, raising questions about its early reassurances. As we reported earlier this week, ASOS customers received a push notification through the ASOS app alleging that the company had been hacke...

ASOS Hackers Hijack App Notifications, Claim Snowflake Data Breach

British online fashion retailer ASOS is investigating unauthorised activity after attackers used its official mobile app to send…...

ASOS “hackers” send push notifications to customers

Thousands of global fashion retailer ASOS customers have received a push notification through the ASOS app this morning alleging that the company has been hacked. The notification, addressed to ASOS’s data protection officer and IT, says: “ASOS HACKED Dear Asos DPO and IT, we have fully compromis...

Malicious code in asos-web-secure-script-container (npm)

The package asos-web-secure-script-container was found to contain malicious code. --- Credit: OpenSSF source...

EUVD-2023-12618

Malicious code in bioql PyPI...

EUVD-2023-12617

Malicious code in bioql PyPI...

MAL-2025-14912 Malicious code in asos-web-secure-script-container (npm)

The package asos-web-secure-script-container was found to contain malicious code...

Malicious code in asos-web-secure-script-container (npm)

The package asos-web-secure-script-container was found to contain malicious code...

CVE-2023-0578

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies Book Cites allows Cross-Site Scripting XSS.This issue affects Book Cites: before 23.01.05...

CVE-2023-0578

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies Book Cites allows Cross-Site Scripting XSS. This issue affects Book Cites: before 23.01.05...

CVE-2023-0577

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies SOBIAD allows Cross-Site Scripting XSS. This issue affects SOBIAD: before 23.02.01...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies SOBIAD allows Cross-Site Scripting XSS.This issue affects SOBIAD: before 23.02.01...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies Book Cites allows Cross-Site Scripting XSS.This issue affects Book Cites: before 23.01.05...

CVE-2023-0578 Multiple XSS in ASOS Information Technologies' Book Cites

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies Book Cites allows Cross-Site Scripting XSS. This issue affects Book Cites: before 23.01.05...

CVE-2023-0578 Multiple XSS in ASOS Information Technologies' Book Cites

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies Book Cites allows Cross-Site Scripting XSS. This issue affects Book Cites: before 23.01.05...

CVE-2023-0578

CVE-2023-0578 describes a Cross-Site Scripting (XSS) vulnerability in ASOS Information Technologies’ Book Cites, affecting versions before 23.01.05. The issue arises from improper neutralization of input during web page generation, enabling injection of malicious script into web pages viewed by o...

CVE-2023-0577

CVE-2023-0577 involves ASOS Information Technologies’ SOBIAD before version 23.02.01. The root cause is improper neutralization of input during web page generation, resulting in a Cross-site Scripting (XSS) vulnerability. Affected component is SOBIAD’s input handling/rendering path prior to 23.02...

CVE-2023-0577 Multiple XSS in ASOS Information Technologies' Sobiad

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies SOBIAD allows Cross-Site Scripting XSS. This issue affects SOBIAD: before 23.02.01...

CVE-2023-0577 Multiple XSS in ASOS Information Technologies' Sobiad

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ASOS Information Technologies SOBIAD allows Cross-Site Scripting XSS. This issue affects SOBIAD: before 23.02.01...

PT-2023-16378

Name of the Vulnerable Software and Affected Versions ASOS Information Technologies SOBIAD versions prior to 23.02.01 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows for Cross-Site Scripting XSS...