Lucene search
K

4 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/08/29 8:52 a.m.5 views

Malicious code in invokehttp (PyPI)

The init.py contains a call to execute a Base64-encoded script to download a second stage payload. --- -= Per source details. Do not edit below this line.=- Source: kam193 e3374942a3d2de4ea1f9444223c351c0ef5356c571a08e8ddb62144f7564def0 In the invokehttp, the init.py contains obfuscated code...

7.5AI score
Exploits0References3
OSV
OSV
added 2024/08/29 8:52 a.m.6 views

MAL-2024-8726 Malicious code in invokehttp (PyPI)

The init.py contains a call to execute a Base64-encoded script to download a second stage payload. --- -= Per source details. Do not edit below this line.=- Source: kam193 e3374942a3d2de4ea1f9444223c351c0ef5356c571a08e8ddb62144f7564def0 In the invokehttp, the init.py contains obfuscated code...

7.4AI score
Exploits0References3
Vulnrichment
Vulnrichment
added 2023/09/03 3:52 p.m.15 views

CVE-2023-41180 Apache NiFi MiNiFi C++: Incorrect Certificate Validation in InvokeHTTP for MiNiFi C++

Incorrect certificate validation in InvokeHTTP on Apache NiFi MiNiFi C++ versions 0.13 to 0.14 allows an intermediary to present a forged certificate during TLS handshake negotation. The Disable Peer Verification property of InvokeHTTP was effectively flipped, disabling verification by default,...

6.8AI score0.00419EPSS
Exploits0References1
OSV
OSV
added 2021/02/24 7:33 p.m.1 views

GHSA-Q594-2475-8V9F Unencrypted passwords

A vulnerability found in Apache NIFI before v0.4.0-RC2. Passwords of InvokeHTTP weren?t encrypted...

7.1AI score
Exploits0References1
Rows per page
Query Builder