drxhello 安全漏洞

drxhello is a pip package for individual developers. A security vulnerability exists in the PyPI v0.0.1 version of the drxhello package. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...

rondolu-yt-concate 安全漏洞

rondolu-yt-concate is a pip package for individual developers. A security vulnerability exists in the rondolu-yt-concate package in PyPI version v0.1.0. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...

cryptoasset-data-downloader 安全漏洞

cryptoasset-data-downloader is a desktop application that downloads historical data on desired crypto assets by connecting to the APIs of several different crypto exchanges. A security vulnerability exists in cryptoasset-data-downloader. An attacker exploited the vulnerability to access sensitive...

AAmiles 安全漏洞

AAmiles is a machine learning project scanner. AAmiles suffers from a security vulnerability. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...

Scoptrial 安全漏洞

Scoptrial is a python package. A security vulnerability exists in Scoptrial. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...

Beginner 安全漏洞

Beginner is a handy code package for Python beginners. A security vulnerability exists in Beginner. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...

Togglee 安全漏洞

Togglee is a simple library for separating feature deployment from release time. A security vulnerability exists in Togglee. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...

watools 安全漏洞

watools is the Water Accounting plus WA+ toolkit. A security vulnerability exists in watools. An attacker could exploit the vulnerability to access sensitive user information and digital currency keys, as well as elevate privileges...

Zibal 安全漏洞

Zibal is the Zibal payment gateway. A security vulnerability exists in Zibal. An attacker could exploit the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...

MAL-2022-310 Malicious code in @harrysforge/currency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54d6e1689eb13a772d1541866e28568663b4be11eb923585343b6499e6ed797b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @harrysforge/currency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 54d6e1689eb13a772d1541866e28568663b4be11eb923585343b6499e6ed797b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7322 Malicious code in yandex-money-currency-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1646902a2c5056651aa75b1e9dba62a1b6914ad5a1218786728bc09d32d19d61 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in klook-node-framework-currency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dfbd858e876e2b63bc6ef2abe24353357a0ac6a6f97ed538729463089dc205b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4183 Malicious code in klook-node-framework-currency (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6dfbd858e876e2b63bc6ef2abe24353357a0ac6a6f97ed538729463089dc205b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Centralization Risk with onlyOwner modifier

Lines of code Vulnerability details Impact During the code review, It has been observed the all currency tokens can be withdraw by owner without timelock. The currency token should not be withdrawn by owner. This poses centralization risk. Proof of Concept 1. Navigate to the following contract...

New York Man Sentenced to 4 Years in Transnational Cybercrime Scheme

A 37-year-old man from New York has been sentenced to four years in prison for buying stolen credit card information and working in cahoots with a cybercrime cartel known as the Infraud Organization. John Telusma, who went by the alias "Peterelliot," had previously pleaded guilty to one count of...

IT threat evolution Q1 2022

IT threat evolution in Q1 2022 IT threat evolution in Q1 2022. Non-mobile statistics IT threat evolution in Q1 2022. Mobile statistics Targeted attacks MoonBounce: the dark side of UEFI firmware Late last year, we became aware of a UEFI firmware-level compromise through logs from our firmware...

GHSA-C45W-P293-7CV6 Magento 2 Community Edition XSS Vulnerability

A stored cross-cite scripting vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to modify currency symbols can inject...

U.S. Warns Against North Korean Hackers Posing as IT Freelancers

Highly skilled software and mobile app developers from the Democratic People's Republic of Korea DPRK are posing as "non-DPRK nationals" in hopes of landing freelance employment in an attempt to enable the regime's malicious cyber intrusions. That's according to a joint advisory from the U.S...

U.S. Sanctions Cryptocurrency Mixer Blender for Helping North Korea Launder Millions

The U.S. Treasury Department on Friday moved to sanction virtual currency mixer Blender.io, marking the first time a mixing service has been subjected to economic blockades. The move signals continued efforts on the part of the government to prevent North Korea's Lazarus Group from laundering the...