MAL-2023-3668 Malicious code in grandver (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d8b0e33ec3a98db370fbc750bf569568c075c33b94a8664a6cc2daee2c327c9e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2646 Malicious code in craftosint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 269b325825c889ff159cfdef9497b48539aeff49275fce8ae9bb0b282f2ed4d9 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

[SECURITY] Fedora 37 Update: kinfocenter-5.27.1-1.fc37

KDE Info Center...

MAL-2023-2667 Malicious code in cvget (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e9fb5170945c3687bddb835fcebeb1b243a21f4daa5714256fffaa56f4b78c58 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection such that an attacker using a specially crafted payload may execute OS commands by using command chaining because during object initalization, there is no validation performed and the user provided path is used...

PT-2023-16682 · Unknown · Jp1016 Markdown-Electron

Name of the Vulnerable Software and Affected Versions: JP1016 Markdown-Electron affected versions not specified Description: A critical issue was found in the software, affecting some unknown functionality, which leads to code injection when manipulated. The attack requires local access. The...

CVE-2023-0994 Exposure of Sensitive Information to an Unauthorized Actor in francoisjacquet/rosariosis

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2...

MAL-2023-2522 Malicious code in candylib (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 519f3670fa7720b71b9b989a62ce9da8edfd866792c9f42eb9bc6707291346b4 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4728 Malicious code in mccandy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 0376f57495716c3ea0357035d1a3e9777ec7cd1b71d78b94a92a48cdef045263 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2622 Malicious code in cpure (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e75f0d2a786cf20271fc42f2113836fca61a31a19520049bb910726e6d933671 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

CVE-2023-26325

creationtimestamp| type| source ---|---|--- 2023-02-23 22:18:40+00:00| seen| https://t.me/cibsecurity/58817 2025-03-12 14:40:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7309...

USN-5884-1 linux-aws vulnerabilities

Kirill Tkhai discovered that the XFS file system implementation in the Linux kernel did not calculate size correctly when pre-allocating space in some situations. A local attacker could use this to expose sensitive information. CVE-2021-4155 Lee Jones discovered that a use-after-free vulnerabilit...

PT-2023-13461

Name of the Vulnerable Software and Affected Versions pdf info version 0.5.3 Description The issue is related to Command Execution. The Ruby code in pdf info uses backticks instead of Open3, which can lead to command execution. An attacker may execute OS commands by using command chaining because...

Hackers Advertising New Info-Stealing Malware on Dark Web

By Deeba Ahmed Dubbed "Stealc" by researchers, the malware is also being promoted on several Russian language hacker and cybercrime forums on the clear net, in addition to the dark web. This is a post from HackRead.com Read the original post: Hackers Advertising New Info-Stealing Malware on Dark ...

K00539290: Linux kernel vulnerability CVE-2019-19534

Security Advisory Description In the Linux kernel before 5.3.11, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peakusb/pcanusbcore.c driver, aka CID-f7a1337f0d29. CVE-2019-19534 Impact There is no impact; F5 products are not affected by this...

K80311892: InfoZIP vulnerability CVE-2019-13232

Security Advisory Description Info-ZIP UnZip 6.0 mishandles the overlapping of files inside a ZIP container, leading to denial of service resource consumption, aka a "better zip bomb" issue. CVE-2019-13232 Impact Local users with administrative access to the BIG-IP Advanced Shell bash may be able...

K8938: BIND DNS cache poisoning vulnerability - CVE-2008-1447 - VU#800113

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

A New Info-Stealing Malware Named “Stealc” Targeting Cryptocurrency Wallets

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A new information-stealing malware called Stealc was discovered in January 2023. This malware is designed to steal sensitive information from various sources including web browsers, desktop cryptocurrenc...

Mozilla: Web Crypto ImportKey crashes tab

The Mozilla Foundation Security Advisory describes this flaw as: When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash...

Mozilla: Web Crypto ImportKey crashes tab

The Mozilla Foundation Security Advisory describes this flaw as: When importing a SPKI RSA public key as ECDSA P-256, the key would be handled incorrectly causing the tab to crash...