EUVD-2004-1355

Malware in sbrugna...

EUVD-2025-23250

Malicious code in bioql PyPI...

MAL-2023-2082 Malicious code in pyintaller (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7c04c405b9cb81b56fb8445a063e858d5f952332c938200c3b13645f22dc1563 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in pyinstallr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx f2b04dc5f801036e2b2232284cac00ae9947d9430365a95aec226804aa88d11a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

Malicious code in coloama (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4403724bca3bb33b526d292dad1f722a9db89e271c5b9803bbd7e88bbaf5550b Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

HCL BigFix Platform 跨站请求伪造漏洞

HCL Technologies HCL BigFix Platform is a suite of endpoint security management platform from HCL Technologies, India. The platform supports automated discovery, management and remediation of endpoint security issues. HCL Technologies HCL BigFix Platform suffers from a security vulnerability that...

CB TAU Technical Analysis: DLTMiner Campaign Targeting Corporations in Asia

A CB customer recently provided a series of commands that they had observed for analysis. The customer felt that the associated attacker activity may have been attempting to tamper with the Carbon Black product. It turned out they were not, but the attackers were specifically looking for the...

Monitoring Windows Console Activity (Part 1)

Introduction While performing incident response, Mandiant encounters attackers actively using systems on a compromised network. This activity often includes using interactive console programs via RDP such as the command prompt, PowerShell, and sometimes custom command and control C2 console tools...

CVE-1999-0566

An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities...