20144 matches found
Malicious code in esqgameloadrandom (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 22513bf97736a201d391141f3507e7f37b18c109a7e0c5c37c9a285a21add19b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in selfproofstudyrand (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 54d672d55b0f254859719e468f499db9702e82590a261936c5975a1ec355954c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-6498 Malicious code in selfproofstudyrand (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 54d672d55b0f254859719e468f499db9702e82590a261936c5975a1ec355954c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-2875 Malicious code in esqgameloadrandom (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 22513bf97736a201d391141f3507e7f37b18c109a7e0c5c37c9a285a21add19b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-4635 Malicious code in libvirtualsplitstring (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 12835d55612081a12b0190ee5d1dbe4b90dd33cc79525e9243fc956ed45ed66b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-3923 Malicious code in libcontrolverlgtb (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 73569bb867470825f5f80691d9e57a22605174ca1673ed1a7869cc45d740d590 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-6238 Malicious code in selfinturlstudy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1587cb04764070f71054ab44987f5a3ab0110b611ee185693ee1e380c5ebb0d3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-5208 Malicious code in py-infohydrarandom (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8b33f80b0693f39c98c339be819a9518bedd56077b20c5e5ac8b71e703de101c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-6274 Malicious code in selflibmineload (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx c56b25553bb4bbf2518a0f202d7ed612d83417d9eeae49b566c50369aba26d38 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
CVE-2022-46257
An information disclosure vulnerability was identified in GitHub Enterprise Server that allowed private repositories to be added to a GitHub Actions runner group via the API by a user who did not have access to those repositories, resulting in the repository names being shown in the UI. To exploi...
Chinese Sharp Panda Group Unleashes SoulSearcher Malware
By Waqas Currently, in its cyber espionage campaign, Sharp Panda hackers are targeting government entities in Asia. This is a post from HackRead.com Read the original post: Chinese Sharp Panda Group Unleashes SoulSearcher Malware...
CVE-2023-26955
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Admin Group module...
CVE-2023-26954
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the User Group module...
CVE-2023-26954
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the User Group module...
CVE-2023-26955
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Admin Group module...
Cross site scripting
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Admin Group module...
Cross site scripting
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the User Group module...
jobs.andersgroup.org Cross Site Scripting vulnerability OBB-3209078
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Advanced Persistent Threat Groups Behind DDoS Attacks on Danish Hospitals
On Sunday 26 February the websites of several Danish hospitals were taken offline after being hit by Distributed Denial of Service DDoS attacks claimed by a group calling themselves ‘Anonymous Sudan’. According to reports on Twitter patient care was unaffected by the attacks and the sites were ba...
GitHub Enterprise Server 安全漏洞
GitHub Enterprise Server is a U.S. GitHub open source application. Provides a platform for setting up your own GitHub instance as a virtual appliance, thus providing a scalable, easy-to-manage platform. A security vulnerability exists in GitHub Enterprise Server versions prior to 3.7. An attacker...