Lucene search
K

22 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2008-2232

Malware in sbrugna...

4.9CVSS7.3AI score0.00393EPSS
Exploits1References17
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/28 2:24 p.m.4 views

Malicious code in typing-extensions-plus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 78c15498f688e49c1d6a8b369eae95e0e77016cd05d74f89a72fa9e845c71da5 Importing the module starts code responsible of exfiltrating crypto tokens and API keys. Package imitates typing-extensions --- Category: MALICIOUS - The...

7.2AI score
Exploits0References1
OSV
OSV
added 2025/06/28 2:24 p.m.6 views

MAL-2025-191914 Malicious code in typing-extensions-plus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 78c15498f688e49c1d6a8b369eae95e0e77016cd05d74f89a72fa9e845c71da5 Importing the module starts code responsible of exfiltrating crypto tokens and API keys. Package imitates typing-extensions --- Category: MALICIOUS - The...

7.1AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/08/10 4:25 p.m.3 views

Malicious code in juphelp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 11cd911a4d43440f44f1eadb92d5d8deda2dc85af9e4a5cf9b99e90918ffad07 Once run, downloads and install from sleipnirbrowser.org a suspicious executable pretending to be a webbrowser. This website appears to be a scam using some ki...

6.9AI score
Exploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/08/10 4:25 p.m.3 views

Malicious code in jupphelp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 dcda51f3ac0b82ef824630ce053d4dc42aa2021baf16e476ca83ef8d7f7c1cab Once run, downloads and install from sleipnirbrowser.org a suspicious executable pretending to be a webbrowser. This website appears to be a scam using some ki...

6.9AI score
Exploits0References4
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/08/10 4:25 p.m.3 views

Malicious code in juphelper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9bc13ee7427735e24063e780c1b868c131887f9f77c858325e1c81353ee4cd3a Once run, downloads and install from sleipnirbrowser.org a suspicious executable pretending to be a webbrowser. This website appears to be a scam using some ki...

6.9AI score
Exploits0References4
OSV
OSV
added 2024/08/10 4:25 p.m.3 views

MAL-2024-12295 Malicious code in jupihelp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 7bb124c218cd3a0340ff934eafc0d4c9cbf322b2428d8a868ed28703aeb38426 Once run, downloads and install from sleipnirbrowser.org a suspicious executable pretending to be a webbrowser. This website appears to be a scam using some ki...

6.8AI score
Exploits0References4
OSV
OSV
added 2024/08/10 4:25 p.m.2 views

MAL-2024-12294 Malicious code in juphelper (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9bc13ee7427735e24063e780c1b868c131887f9f77c858325e1c81353ee4cd3a Once run, downloads and install from sleipnirbrowser.org a suspicious executable pretending to be a webbrowser. This website appears to be a scam using some ki...

6.8AI score
Exploits0References4
OSV
OSV
added 2024/08/10 4:25 p.m.2 views

MAL-2024-12293 Malicious code in juphelp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 11cd911a4d43440f44f1eadb92d5d8deda2dc85af9e4a5cf9b99e90918ffad07 Once run, downloads and install from sleipnirbrowser.org a suspicious executable pretending to be a webbrowser. This website appears to be a scam using some ki...

6.8AI score
Exploits0References4
HackRead
HackRead
added 2022/01/24 8:43 p.m.25 views

Researchers warn of new Rug Pull scam through fraudulent crypto tokens

By Deeba Ahmed Another day another Rug Pull scam that involves exploiting of smart contract vulnerability. Scammers are exploiting misconfigurations in… This is a post from HackRead.com Read the original post: Researchers warn of new Rug Pull scam through fraudulent crypto tokens...

3AI score
Exploits0
Hacker One
Hacker One
added 2019/05/10 12:35 p.m.110 views

Revive Adserver: Authentication Bypass by abusing Insecure crypto tokens in /lib/OA/Dal/PasswordRecovery.php:

Hi, This is a fun bug I came across while doing a pentest for a client, after going through Revive Advserver's code for a few hours, I found this authentication bypass. This vulnerability seem to affect all versions, including the latest one, I was sent by one of your developers to report it here...

0.2AI score
Exploits0
OpenVAS
OpenVAS
added 2009/04/09 12:0 a.m.29 views

Mandriva Update for opensc MDVSA-2008:183 (opensc)

Check for the Version of opensc OpenVAS Vulnerability Test Mandriva Update for opensc MDVSA-2008:183 opensc Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

4.9CVSS0.3AI score0.00393EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2008/09/17 12:0 a.m.22 views

Debian Security Advisory DSA 1627-2 (opensc)

The remote host is missing an update to opensc announced via advisory DSA 1627-2. OpenVAS Vulnerability Test $Id: deb16272.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1627-2 opensc Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

4.9CVSS0.5AI score0.00393EPSS
Exploits1
Debian
Debian
added 2008/08/31 10:37 a.m.20 views

[SECURITY] [DSA 1627-2] New opensc package fix incomplete check

------------------------------------------------------------------------ Debian Security Advisory DSA-1627-2 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 31, 2008 http://www.debian.org/security/faq -...

4.9CVSS6.2AI score0.00393EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2008/08/05 12:0 a.m.25 views

Debian DSA-1627-2 : opensc - programming error

Chaskiel M Grundman discovered that opensc, a library and utilities to handle smart cards, would initialise smart cards with the Siemens CardOS M4 card operating system without proper access rights. This allowed everyone to change the card's PIN. With this bug anyone can change a user PIN without...

4.9CVSS7.1AI score0.00393EPSS
Exploits1References2
Debian
Debian
added 2008/08/04 9:0 a.m.29 views

[SECURITY] [DSA 1627-1] New opensc packages fix smart card vulnerability

------------------------------------------------------------------------ Debian Security Advisory DSA-1627-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst August 04, 2008 http://www.debian.org/security/faq -...

4.9CVSS6.3AI score0.00393EPSS
Exploits1
OSV
OSV
added 2008/08/04 12:0 a.m.13 views

DSA-1627-2 opensc - smart card vulnerability

Bulletin has no description...

6.6CVSS6.3AI score0.00393EPSS
Exploits1
UbuntuCve
UbuntuCve
added 2008/08/01 2:41 p.m.21 views

CVE-2008-2235

OpenSC before 0.11.5 uses weak permissions ADMIN file control information of 00 for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which allows physically proximate attackers to change the PIN...

4.9CVSS7.1AI score0.00393EPSS
Exploits1References1
Prion
Prion
added 2008/08/01 2:41 p.m.9 views

Design/Logic Flaw

OpenSC before 0.11.5 uses weak permissions ADMIN file control information of 00 for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which allows physically proximate attackers to change the PIN...

4.9CVSS6.2AI score0.00393EPSS
Exploits1References15Affected Software1
Debian CVE
Debian CVE
added 2008/08/01 2:0 p.m.24 views

CVE-2008-2235

OpenSC before 0.11.5 uses weak permissions ADMIN file control information of 00 for the 5015 directory on smart cards and USB crypto tokens running Siemens CardOS M4, which allows physically proximate attackers to change the PIN...

4.9CVSS6.2AI score0.00393EPSS
Exploits1
Rows per page
Query Builder