PT-2023-21005 · Unknown · Best Pos Management System

Name of the Vulnerable Software and Affected Versions: Best POS Management System version 1.0 Description: A cross-site scripting XSS issue exists in the /kruxton/navbar.php file, allowing attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the page parameter...

Malicious code in esqnvidiaadram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx df81ceb2dfc3d91db398dd60bef12374d2d9b31b3b09fd2371d124ea8ed0773a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfgetstudyram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx fdda7d56b6aa6eb73f92bed1357541a275155187c112794075d779a88e26c7ed EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfsupergameencode (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx af6f2b9e4bedd9764c7ad96b9866e69e2e2592a7a123c456c10fa58eaad0774f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libcraftlgtbload (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5baa51be47458710923d431708febf1cec900cbcd510cfa9787632b2721658fc EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpkillpeppep (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 37dccf1ff05e4a3712931d1b54a982485c816eaec6f8073688f78dd71c97ae8d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tppongvisapip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 97034062effeb064e121185bdcc8b8d0277442b566e4c5049181bec477282e08 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqpostintelcpu (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx beacee9777797c5d8ee21c9316699e3434831a6a013e3babf2e0d8c81a1e51a5 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfccvirtualgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6f473caf5efdb197b10fa7a45703b2568aa216d97a543a2db0fdca2746686578 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-infohydrarandom (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8b33f80b0693f39c98c339be819a9518bedd56077b20c5e5ac8b71e703de101c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

CVE-2020-36667

The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to unauthorized back-up location changes in versions up to, and including 1.4.1 due to a lack of proper capability checking on the backupguardclouddropbox, backupguardcloudgdrive, and backupguardcloudoneDrive function...

WordPress plugin JetBackup – WP Backup, Migrate & Restore 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2022-4862

Rendering of HTML provided by another authenticated user is possible in browser on M-Files Web before 22.12.12140.3. This allows the content to steal user sensitive information. This issue affects M-Files New Web: before 22.12.12140.3...

CVE-2022-4862

Rendering of HTML provided by another authenticated user is possible in browser on M-Files Web before 22.12.12140.3. This allows the content to steal user sensitive information. This issue affects M-Files New Web: before 22.12.12140.3...

CVE-2022-4862

CVE-2022-4862 affects M-Files Web and M-Files New Web versions before 22.12.12140.3. The vulnerability arises from rendering HTML provided by another authenticated user in the browser, which can lead to the disclosure of user-sensitive information. Public documents consistently describe this as a...

Unveiling the Malicious Tactics of LokiBot Malware

Threat Level Attack Report Follow Hive Pro for a detailed threat advisory, download the pdf file here from HiveForce Labs. Summary LokiBot is a constantly evolving information-stealing malware that creates a backdoor on infected machines to collect sensitive data, and it uses ISO files and API...

A week in security (February 27 - March 5)

Last week on Malwarebytes Labs: Fighting online censorship, or, encryption's latest surprise use-case, with Mallory Knodel: Lock and Code S04E05 How to work from home securely, the NSA way TikTok probed over child privacy practices iPhone users targeted in phone AND data theft campaign US Marshal...

PT-2023-15884

Name of the Vulnerable Software and Affected Versions M-Files Web versions prior to 22.12.12140.3 M-Files New Web versions prior to 22.12.12140.3 Description The issue allows rendering of HTML provided by another authenticated user in the browser, which can lead to the theft of user sensitive...

Malicious code in selfguiccproof (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ea7418f7e3ad0ac2643fef73e4c4708870ec4bc48336f3fb7d44afff750b3acf EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqguipippost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ffddab58b55b41b1dab0ee7f0f198c7fa70354c3fa89eb26abebacd316ac2b60 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...