Malicious code in hello-bozzo2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 96e02710356e7f0a4dee853d165a2d18a0a4addad3a07c397e495f61f6bc92fa Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

MAL-2024-12283 Malicious code in hello-bozzo2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 96e02710356e7f0a4dee853d165a2d18a0a4addad3a07c397e495f61f6bc92fa Packages that might be part of testing for pentesting / malicious activity / joy, with suspicious activity that does not present any real harm. --- Category:...

WordPress Hello Agency theme <= 1.0.5 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Fariq Fadillah Gusti Insani Patchstack Alliance in WordPress Theme Hello Agency versions = 1.0.5...

Insights and highlights from DEF CON 32

TL; DR Event Dates : August 8-11, 2024, in Las Vegas. PTP Presentations : Windows Hello : Our Ceri Coburn with Outsider Security's Dirk-Jan Mollema revealed vulnerabilities in biometric authentication. Maritime Security : Paul Brownridge discussed vulnerabilities in maritime systems and...

WordPress Hello Agency Theme <= 1.0.5 is vulnerable to Broken Access Control

Software Hello Agency Type Theme Vulnerable versions = 1.0.5 Fixed in 1.0.6 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43341 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID dad92fd9c880 Credits Fariq Fadillah Gusti Insani...

June 11, 2024—KB5039227 (OS Build 20348.2527)

None None...

Malicious code in hello-wordl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 238c137f1939d99c855ef5fedf6f16b67ac8fcd9087d80270475d3eeff8e8c65 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2025-3600 Malicious code in hello-wordl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 238c137f1939d99c855ef5fedf6f16b67ac8fcd9087d80270475d3eeff8e8c65 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in hello-kelvinst (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-6942 Malicious code in hello-kelvinst (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in hello-demo-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-2458 Malicious code in hello-demo-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2024-6326 · Wolfssl +1 · Wolfssl +1

Name of the Vulnerable Software and Affected Versions: WolfSSL affected versions not specified Description: A malicious TLS1.2 server can force a TLS1.3 client with downgrade capability to use a ciphersuite that it did not agree to and achieve a successful connection. This is because, aside from...

Malicious code in hello-1st-anni (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7324e12f4247915474315b0c6446c86c97ef20bca17e3baa9b31478fc7e612d2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-22590

The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten at any time, including after a connection has been established...

CVE-2024-22590

The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten at any time, including after a connection has been established...

CVE-2024-22590

The TLS engine in Kwik commit 745fd4e2 does not track the current state of the connection. This vulnerability can allow Client Hello messages to be overwritten at any time, including after a connection has been established...

Kwik 安全漏洞

Kwik is a client and server that implements the QUIC protocol RFC 9000 by the individual developer Peter Doornbosch in the Netherlands. A security vulnerability exists in Kwik version 745fd4e2, which stems from the TLS engine not keeping track of the current state of a connection, which could...

PT-2024-19495 · Kwik · Kwik

Name of the Vulnerable Software and Affected Versions: Kwik version 745fd4e2 Description: The TLS engine does not track the current state of the connection, allowing Client Hello messages to be overwritten at any time, including after a connection has been established. Recommendations: For versio...

New Windows 11 features strengthen security to address evolving cyberthreat landscape

Ahead of the Microsoft Build 2024 conference, we announced a new class of Windows computers, Copilot+ PC. Alongside this exciting new class of PCs, we are introducing important security features and updates that make Windows 11 more secure for users and organizations and give developers the tools...