31 matches found
WordPress Simple Image Manipulator < 1.0 - Local File Inclusion Detection
WordPress Simple Image Manipulator 1.0 is vulnerable to local file inclusion in ./simple-image-manipulator/controller/download.php because no checks are made to authenticate users or sanitize input when determining file location. !/usr/bin/env python3 -- coding: utf-8 -- """WordPress Simple Image...
Malicious Package
Overview f0-form-manipulator is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
MAL-2026-11060 Malicious code in f0-form-manipulator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 058782981a80d3fc90af74a840a00cefa0c58b9861c481d0444b7f4f3e6a014b On npm install, the package's preinstall hook executes index.js, which collects host identifiers os.hostname, os.platform, os.arch, os.homedir,...
Malicious code in f0-form-manipulator (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 058782981a80d3fc90af74a840a00cefa0c58b9861c481d0444b7f4f3e6a014b On npm install, the package's preinstall hook executes index.js, which collects host identifiers os.hostname, os.platform, os.arch, os.homedir,...
UAC-0050 Targets European Financial Institution With Spoofed Domain and RMS Malware
A Russia-aligned threat actor has been observed targeting a European financial institution as part of a social engineering attack to likely facilitate intelligence gathering or financial theft, signaling a possible expansion of the threat actor's targeting beyond Ukraine and into entities...
connectome-manipulator (>=0.0.11.dev1, <=1.0.0), molscore (>=1.1.0, <=1.4.0) potentially affected by CVE-2026-23528 via distributed (2023.6.0)
distributed PYPI version 2023.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - connectome-manipulator =0.0.11.dev1, =1.1.0, =1.4.0 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...
connectome-manipulator (>=0.0.11.dev1, <=1.0.0), molscore (>=1.1.0, <=1.4.0) potentially affected by CVE-2026-23528 via distributed (2023.6.0)
distributed PYPI version 2023.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - connectome-manipulator =0.0.11.dev1, =1.1.0, =1.4.0 Source cves: CVE-2026-23528 Source advisory: OSV:GHSA-C336-7962-WFJ2...
Synactis PDF In-The-Box security vulnerability
Synactis PDF In-The-Box is a PDF generation and manipulation component from the French company Synactis. A security vulnerability exists in Synactis PDF In-The-Box that stems from a buffer overflow in the ConnectToSynactis method, which could lead to remote code execution...
MAL-2023-1879 Malicious code in idscord-py (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3d39786f116b2209474d5d52204c264d399788c719092dfa47594e44efc33802 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
MAL-2023-1966 Malicious code in ppytorch (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx d60189f9e54fe7d869b9bca2411c34aee3347b295fbcecd459027ae95065fba1 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...
Microsoft Rushes Fix for ‘PetitPotam’ Attack PoC
Microsoft was quick to respond with a fix to an attack dubbed “PetitPotam” that could force remote Windows systems to reveal password hashes that could then be easily cracked. To thwart an attack, Microsoft recommends system administrators stop using the now deprecated Windows NT LAN Manager NTLM...
Unspecified vulnerability in KUKA controller KR C4
The KUKA controller KR C4 is a robot control system from the German company KUKA. A security vulnerability exists in KUKA controller KR C4. An attacker can exploit the vulnerability to stop the manipulator from running by terminating critical services from the Windows Task Manager...
CVE-2020-10268
Critical services for operation can be terminated from windows task manager, bringing the manipulator to a halt. After this a Re-Calibration of the brakes needs to be performed. Be noted that this only can be accomplished either by a Kuka technician or by Kuka issued calibration hardware that...
CVE-2020-10268
CVE-2020-10268 affects the KUKA KR C4 robot controller. A vulnerability allows terminating critical services from Windows Task Manager, causing the manipulator to halt. Recovery requires recalibration of brakes, which must be performed by a KUKA technician or using KUKA calibration hardware. The ...
CVE-2020-10268 RVD#2550: Terminate Critical Services in KUKA controller KR C4
Critical services for operation can be terminated from windows task manager, bringing the manipulator to a halt. After this a Re-Calibration of the brakes needs to be performed. Be noted that this only can be accomplished either by a Kuka technician or by Kuka issued calibration hardware that...
CVE-2020-10268: Exposed Dangerous Method or Function
Critical services for operation can be terminated from windows task manager, bringing the manipulator to a halt. After this a Re-Calibration of the brakes needs to be performed. Be noted that this only can be accomplished either by a Kuka technician or by Kuka issued calibration hardware that...
TA505 Crooks are Now Targeting US Retailers with Personalized Campaigns
Cybercriminals behind the notorious Dridex and Locky ransomware have a new target in their sights – large retail, restaurant and grocery chains located in the US. Researchers are warning the well-known financial criminal group TA505 is behind a new wave of email campaigns distributing personalize...
Phishing Campaign Steals Money From Industrial Companies
Industrial production companies are the targets in a large-scale spear-phishing email campaign aimed at installing legitimate remote administration software on victims’ systems. Researchers with Kaspersky Lab said that emails purporting to be commercial offers were the conduit to enabling attacke...
Wordpress simple-image-manipulator plugin remote file download vulnerability
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language. simple-image-manipulator is one of the image manipulator plugin. A remote file download vulnerability exists in Wordpress simple-image-manipulator plugin v1.0, which can be exploited by...
