Malicious code in tppeppushpyw (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8901daabd1fd5ffa29ca8bb53328a0a8c12111550f9c123572dbea1165b0d482 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selframstudyget (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a5b93c81555a82437f73fcf55973c7748cffdcae203c5d9509b631f1b3045583 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqsplitmaskpy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2cadf68299beea020bbc42f55c9f454ec369f961da1def31c74e178ec7d26fea EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in selfosintlgtbstr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 72a82acd1936dd2862d3ae50f306316e216968de99be2b8cc2b32ff452def894 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

CVE-2023-26047

CVE-2023-26047 affects the Go HTTP middleware teler-waf (pre-0.2.0). The issue is a bypass vulnerability where a specific case-sensitive hex-entities payload containing CR/LF and horizontal tab can bypass web-attack rules, enabling an attacker to inject and execute arbitrary JavaScript in victims...

CVE-2023-26492

Directus is a real-time API and App dashboard for managing SQL database content. Directus is vulnerable to Server-Side Request Forgery SSRF when importing a file from a remote web server POST to /files/import. An attacker can bypass the security controls by performing a DNS rebinding attack and...

CVE-2023-26492

Directus is vulnerable to Server-Side Request Forgery (SSRF) when importing a file from a remote web server (POST to /files/import), exploitable via DNS rebinding to bypass IP deny lists and access sensitive internal data. Affected versions include Directus prior to 9.23.0 (e.g.,

Malicious code in selfgamepypost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx b752d0d154d23b39a06208732e66acc078f25853c4e8773d6810722a5518d98a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpccpinghacked (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6a478609e79f55ac56cad5160420dee434d9575058476a5dbcc7601f22759a0b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Directus 代码问题漏洞

Directus is a real-time Api and application dashboard. It is used to manage Sql database content. A code issue vulnerability exists in Directus versions prior to 9.23.0 that stems from the presence of a server-side request forgery SSRF vulnerability, which can be exploited by an attacker to acces...

Malicious code in esqcpupipkill (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0ad033fc63cd19958fd0a2227af894a9ee647a59260b564cc71cee1c7f9e1000 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqpeprandpaypal (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx aea048ba013f7ce939059d9531409ed96c93631c646b24bd3ac9e6d2f3a6cb29 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in esqhackedlgtbpip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx bd6276a4e7765be4133f2dac570d7dff2ee5d840441edb46e0de688f805a7a05 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tptoolpywgui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 13ae482293b38eb9a03870f3e171704aa0f874d8bd2d844f29b891e26bee00f7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Hackers Exploit Containerized Environments to Steal Proprietary Data and Software

A sophisticated attack campaign dubbed SCARLETEEL is targeting containerized environments to perpetrate theft of proprietary data and software. "The attacker exploited a containerized workload and then leveraged it to perform privilege escalation into an AWS account in order to steal proprietary...

Highly Sophisticated SCARLETEEL Cloud Attack That Stole Proprietary Data

Threat Level Attack Report Follow Hive Pro for a detailed threat advisory, download the pdf file here from HiveForce Labs. Summary The SCARLETEEL attack was a highly sophisticated cloud operation that involved the theft of proprietary data by exploiting a compromised Kubernetes container,...

iPhone users targeted in phone AND data theft campaign

When is an iPhone theft not just an iPhone theft? When the user's Apple ID and more, goes with it. That's what the Wall Street Journal reports has been happening over recent months. The paper interviewed a handful of people who fell victim to old-school phone theft while out in a bar. But it wasn...

Malicious code in py-hackedultratool (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 683154729de593cbfc8208d40aa345d873fc343abf863e10d885962f3b13a1e7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-postvirtualreplace (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d7b9701edc84fbcc3d0b9e480403fce062157f951a024ad446797bdf30f0a017 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tppushvmgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 96c8cf2f968b45c647c32d2dc65de5b1550ae52555dfadf4c35151afaefc1d5a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...