20950 matches found
Lazarus Group Exploits Zero-Day Vulnerability to Hack South Korean Financial Entity
The North Korea-linked Lazarus Group has been observed weaponizing flaws in an undisclosed software to breach a financial business entity in South Korea twice within a span of a year. While the first attack in May 2022 entailed the use of a vulnerable version of a certificate software that's wide...
Lazarus Group Exploits Zero-Day Vulnerability to Hack South Korean Financial Entity
The North Korea-linked Lazarus Group has been observed weaponizing flaws in an undisclosed software to breach a financial business entity in South Korea twice within a span of a year. While the first attack in May 2022 entailed the use of a vulnerable version of a certificate software that's wide...
Debian: Security Advisory (DLA-74-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malicious code in selfproofstudyrand (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 54d672d55b0f254859719e468f499db9702e82590a261936c5975a1ec355954c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in esqgameloadrandom (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 22513bf97736a201d391141f3507e7f37b18c109a7e0c5c37c9a285a21add19b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-6498 Malicious code in selfproofstudyrand (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 54d672d55b0f254859719e468f499db9702e82590a261936c5975a1ec355954c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-2875 Malicious code in esqgameloadrandom (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 22513bf97736a201d391141f3507e7f37b18c109a7e0c5c37c9a285a21add19b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-3923 Malicious code in libcontrolverlgtb (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 73569bb867470825f5f80691d9e57a22605174ca1673ed1a7869cc45d740d590 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-4635 Malicious code in libvirtualsplitstring (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 12835d55612081a12b0190ee5d1dbe4b90dd33cc79525e9243fc956ed45ed66b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-6238 Malicious code in selfinturlstudy (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1587cb04764070f71054ab44987f5a3ab0110b611ee185693ee1e380c5ebb0d3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-5208 Malicious code in py-infohydrarandom (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 8b33f80b0693f39c98c339be819a9518bedd56077b20c5e5ac8b71e703de101c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-6274 Malicious code in selflibmineload (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx c56b25553bb4bbf2518a0f202d7ed612d83417d9eeae49b566c50369aba26d38 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
CVE-2022-46257
An information disclosure vulnerability was identified in GitHub Enterprise Server that allowed private repositories to be added to a GitHub Actions runner group via the API by a user who did not have access to those repositories, resulting in the repository names being shown in the UI. To exploi...
Chinese Sharp Panda Group Unleashes SoulSearcher Malware
By Waqas Currently, in its cyber espionage campaign, Sharp Panda hackers are targeting government entities in Asia. This is a post from HackRead.com Read the original post: Chinese Sharp Panda Group Unleashes SoulSearcher Malware...
CVE-2023-26954
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the User Group module...
CVE-2023-26955
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Admin Group module...
CVE-2023-26955
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the Admin Group module...
CVE-2023-26954
onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting XSS vulnerability via the User Group module...
