17615 matches found
MAL-2023-5722 Malicious code in py-urlhttphttp (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6e1a76dead03b03b5b1a66c3ac3c2845b95ccf2e6762f24639b562bc76e8e7a7 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
CVE-2022-4289
GitLab CVE-2022-4289 affects all versions from 15.3 up to before 15.7.8, versions 15.8 up to before 15.8.4, and 15.9 up to before 15.9.2. The issue is that Google IAP details in the Prometheus integration were not hidden and could be leaked from instance, group, or project settings to other users...
CVE-2021-23185
Rejected reason: This candidate was in a CNA pool that was not assigned to any issues during 2021...
CVE-2023-1233
Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from API via a crafted Chrome Extension. Chromium security severity: Low...
CVE-2023-1232
CVE-2023-1232 affects Google Chrome (Chromium-based) Resource Timing: insufficient policy enforcement can allow a remote attacker to obtain potentially sensitive information from the API via a crafted HTML page. The issue is documented as Low severity and is mitigated by upgrading to Chrome 111.0...
Persistence – Event Log Online Help
Event viewer is a component of Microsoft Windows that displays information related to application, security, system and setup events. Even though that Event Viewer is… Continue reading - Persistence - Event Log Online Help...
Play ransomware gang leaks City of Oakland data
The Play ransomware gang has begun partially publishing data they stole from the City of Oakland, California. The data were in multiple archive files with a collective file size of 10GB. According to the ransomware gang, the files contain "private and personal information data, financial...
CVE-2023-1203
CVE-2023-1203 affects Devolutions Remote Desktop Manager PowerShell Module, Hub Business submodule. The vulnerability stems from improper removal of sensitive data during entry edits, allowing an authenticated user to access sensitive data on entries edited with the affected submodule. Affected v...
CVE-2022-4862
CVE-2022-4862 affects M-Files Web and M-Files New Web versions before 22.12.12140.3. The vulnerability arises from rendering HTML provided by another authenticated user in the browser, which can lead to the disclosure of user-sensitive information. Public documents consistently describe this as a...
CVE-2022-4927
The CVE-2022-4927 entry concerns ualbertalib NEOSDiscovery prior to 1.0.71. The vulnerability affects the file path app/views/bookmarks/_refworks.html.erb and enables manipulation that leads to navigation to a web link targeting an untrusted destination with window.opener access (reverse-tabnabbi...
CVE-2023-22424
CVE-2023-22424 affects Kostac PLC Programming Software (formerly Koyo PLC Programming Software) by a Use-After-Free vulnerability when the maximum number of columns for the PLC program is mis-handled. The issue occurs in versions 1.6.9.0 and earlier and can lead to information disclosure and/or a...
What to Do When Your Boss Is Spying on You
Employee monitoring increased with Covid-19’s remote work—and stuck around for back-to-the-office...
MAL-2023-6126 Malicious code in selfguiccproof (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx ea7418f7e3ad0ac2643fef73e4c4708870ec4bc48336f3fb7d44afff750b3acf EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
MAL-2023-6425 Malicious code in selfpingintelvm (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx a44990ecaf2c67cbb557f51a2f1d1cb935550aecce62f20553e38b579c830ce6 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
CVE-2022-45553
creationtimestamp| type| source ---|---|--- 2023-03-03 16:35:57+00:00| seen| https://t.me/cibsecurity/59371 2025-03-07 17:35:28+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6873 2025-03-08 04:35:52+00:00| seen| Telegram/vkAV5fsjS3QZUNyDjnYgtqv1Rk2fS4cc3ZnN9Ch1WUrmiz...
CVE-2021-36689
The vulnerability CVE-2021-36689 affects Streetside Samourai Wallet for Android (version 0.99.96i). It involves com.samourai.wallet.PinEntryActivity.java, where a brute-force attack using a recovered samourai.dat file can allow an attacker to view sensitive information and decrypt data. The PIN l...
CVE-2023-26051
Summary of CVE-2023-26051 (Saleor) : Saleor is vulnerable to information disclosure via unhandled internal Python exceptions that may be returned in API error messages. The leakage can reveal sensitive data such as user email addresses in staff-authenticated requests. This issue has been addresse...
CVE-2021-45479
The CVE-2021-45479 vulnerability affects the Library Automation System by Yordam Information Technologies, with the component/issue arising from improper neutralization of input during web page generation, leading to Stored XSS in versions before 19.2. The practical impact is cross-site script ex...
SEC cyber risk management rule—a security and compliance opportunity
In my practice as a Microsoft Global Black Belt, I focus on the technical and business enablement aspects of protecting organizations from cyber threats with tools like Microsoft 365 Defender, Microsoft Purview and Microsoft Sentinel. In my role as a board member for another publicly traded...
