CVE-2024-34882

CVE-2024-34882 affects 1C-Bitrix Bitrix24 v23.300.100. The root cause is insufficient protection of credentials in SMTP server settings, enabling remote administrators to exfiltrate SMTP account passwords to an arbitrary server via HTTP POST. Impact is credential exposure from the SMTP configurat...

MAL-2023-5181 Malicious code in py-httppost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx acddf75f234007d90d4faba8447994288d17044e88aab075c437b9deef9e96ac EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-httppost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx acddf75f234007d90d4faba8447994288d17044e88aab075c437b9deef9e96ac EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Iranian RANA Android Malware Also Spies On Instant Messengers

A team of researchers today unveiled previously undisclosed capabilities of an Android spyware implant—developed by a sanctioned Iranian threat actor—that could let attackers spy on private chats from popular instant messaging apps, force Wi-Fi connections, and auto-answer calls from specific...

Denial Of Service (DoS)

pycurl is vulnerable to denial of service DoS. The vulnerability exists through a use-after-free weakness in HTTPPOST when using FORMBUFFERPTR, allowing an attacker to crash the application via a malicious unicode string...

Updated python-curl packages fix security vulnerability

A use-after-free vulnerability was found in Curl object's HTTPPOST setopt when a Unicode value is passed as a value with a FORMBUFFERPTR. The str object created from the passed in unicode object would have its buffer used but the unicode object would be stored instead of the str object rhbz127748...

MGASA-2015-0440 Updated python-curl packages fix security vulnerability

A use-after-free vulnerability was found in Curl object's HTTPPOST setopt when a Unicode value is passed as a value with a FORMBUFFERPTR. The str object created from the passed in unicode object would have its buffer used but the unicode object would be stored instead of the str object rhbz127748...