Network_Assessment - With Wireshark Or TCPdump, You Can Determine Whether There Is Harmful Activity On Your Network Traffic That You Have Recorded On The Network You Monitor

With Wireshark or TCPdump, you can determine whether there is harmful activity on your network traffic that you have recorded on the network you monitor. This Python script analyzes network traffic in a given .pcap file and attempts to detect the following suspicious network activities and attack...

Malicious code in @obg/ngx.global (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 88f55cbace2fa2eb2e05fb52cd0e69c6a623b5b977a0d6638853b20fe1dac89f The OpenSSF Package Analysis project identified '@obg/ngx.global' @ 99999.0.0 npm as malicious. It is considered malicious because: - The packag...

Cross site scripting

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights can edit all pages in the CKEditor' space. This makes it possible to perform a variety of harmful actions, such as removing technical documents, leading to loss of...

CVE-2023-36477 Persistent Cross-site Scripting (XSS) through CKEditor Configuration pages in XWiki Platform

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any user with edit rights can edit all pages in the CKEditor' space. This makes it possible to perform a variety of harmful actions, such as removing technical documents, leading to loss of...

Malicious code in js-integration-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdf524832b5a7754384bb05dae5fb10558591f104915c2f9b5518db338003a92 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in coveo.analytics-fts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6043a9b37b40dc82161ee17610e0b57801c116d25e9164912ac9352ab55c9c00 The OpenSSF Package Analysis project identified 'coveo.analytics-fts' @ 2.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in selenium-matplotlib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c33741bca6736c936d2c0540044a5d38caf6a18b6981e6268da4295f64985a68 The OpenSSF Package Analysis project identified 'selenium-matplotlib' @ 17.9.4 pypi as malicious. It is considered malicious because: - The...

Malicious code in mesbah-unclaim (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 263dd8e3a7c219627fe6ca196c18bb5262996c68f086fd118d74caec6e06aee1 The OpenSSF Package Analysis project identified 'mesbah-unclaim' @ 2.0.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in kobi--front-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5177d79e84b460a9e6e01e3f7ec740846cab3ff8094ccf7fa38232683498d45c The OpenSSF Package Analysis project identified 'kobi--front-helpers' @ 1.15.0 npm as malicious. It is considered malicious because: - The packa...

Potential SHA256 Digest Vulnerability in Solidity Contract

Lines of code Vulnerability details Impact This vulnerability enables the hacker to pass malicious data to the "verify" function, which in turn uses the said data as input for the sha256 function, this can lead to unexpected or incorrect output, potentially resulting in unauthorized access to...

Malicious code in gtf-error-tracker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c82adcb211353de0790c397f626068e2d5397effcfd904dcfeafd92cb450f2f1 The OpenSSF Package Analysis project identified 'gtf-error-tracker' @ 99.9.8 npm as malicious. It is considered malicious because: - The package...

Malicious code in py-pongmaskgrand (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ca30eca9847b01b8f2ecc7107ed916e8f7418cab08e81146c6ce73077afd3ea7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in libpushintpong (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1675e5d330eccdd419b14df2cd6a1d06edc09a0139276575bd00be219e0783c0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpmchydracraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx ac25be04b8afa37c1f9be85c566672690932ae38e50a4701a7d79a7d143bb431 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-maskhacked (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 7559cba6b2cd3e9c2cb4c8ee51fd43bfd2bbe3725e21905e129555fb9b968ead EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3810 Malicious code in intelcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 87be178c366923773d23bbd4a1ea2f6c918620fde80b7cd1c618ff7f4f821f5b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

iPhone calendar spam: What it is, and how to remove it

If you open up your iPhone and see a variety of messages claiming that youve been hacked, your phone is not protected, that viruses have damaged your phone, or, my personal favourite, "Click to get rid of annoying ads", fear not. Its quite possible youve accidentally wandered into a common form o...

SUSE CVE-2017-1000499

phpMyAdmin versions 4.7.x prior to 4.7.6.1/4.7.7 are vulnerable to a CSRF weakness. By deceiving a user to click on a crafted URL, it is possible to perform harmful database operations such as deleting records, dropping/truncating tables etc...

Malicious code in eslint-plugin-dropbox-sign (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ef0b78a956b34b6e0c3db65f1f623e28b0e80753ffae8ea19c75e4217f1dc0b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-2002 Malicious code in prompt-toolkiit (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d580c098686d198715824a4368bd2e02c21d8d4d659d87888070e4cc8c662c9a Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...