MAL-2024-12221 Malicious code in blz-test-package (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 01f2433c1d8bc3c461a9580e06ffcac55e0d5e79ac651f1326c6ddd10114a544 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12250 Malicious code in crunchie (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f26d858f791d6d12aab4d70b3f5494c2b675934ba0b13cffa405ecd0686cfa91 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12343 Malicious code in shinchina (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0a21b3328ab75bc0d00f300ad728fa27c3b3acc2396d7af90522856afe628aca Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in pinloggertest (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d5f6beadd08c32e5fd2f899428285a58ab3d696ef0fc06d2eff10e2d8630fa9a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in c8tks94kspjghtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 9182e332ef5bf851522bb14086c5159f1c606fb90094722f856c87f36e382da7 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in c8tks94kspjyhtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 55ea5b13a1064ea6ada9f0d6ac879a6b269b476871734f578f6c097a5baa73f3 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in chunqiuwestj-pkg-westj137 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 03ad250cd789424d92dd1351d15a218d3950be367950c4fc129cf866423a7b8e Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12315 Malicious code in oaieval (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fd257dee43f966eaacc56e07462eae9170a8a81dc1be6f0df9145f8c3a44de59 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12252 Malicious code in dependency-confusion-test-666 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d4daea3fdf20972a88b9946b1251807b3caca0e1634dd53c2be92cf3d1849cd8 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12331 Malicious code in pydevd-inject (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5a67732a19f213875b774ca8fb24e8d3c1c3cd9d357cf7e6425a3ee3eadb9f3a Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12371 Malicious code in yt-yson-bindings (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 870d6e991bf31676829c84080af299f206568bc11d6f9b42bf5fe2dca50cb79d Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12341 Malicious code in rtxt-dep2 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3a0cd03149005afa6cc505bea16d80c21f5bbbd226c16c659ed6abb41cf730a2 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12368 Malicious code in wave-opensdk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 5dbda9bf70afa0311dbd7b22b5209531b90399bcc4a5cd5846d3f5fa89314f47 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12316 Malicious code in oe-extract-ids (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 bebbe22a538c4b7b6688bd82facdd749052e801663cf523c8d9c1eb11f81ea57 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12265 Malicious code in evil-pkk (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 08a7017f27a32357776a4c781a0f5d29d48569562b97c03f91811af7aaaac2ca Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

MAL-2024-12304 Malicious code in manoj3121pip (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ca36f3207b39f83d096054f521bd3dbbedf899c5f9d9e0fa494b6c216b56d481 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in asptcer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0d894aaf391a92c45f39e6b2e71afaa83b0ea7310e3084ed0a958872a551910e --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also anything that looks like testing, exploring pre-prepared kits, researc...

HackerOne: Any user could upload attachments to pentest scoping form they don't have access to

The root cause of this issue was insufficient access controls implemented in the attachment upload functionality for pentest scoping forms. The endpoint responsible for handling attachment uploads did not properly validate the user's access rights to the specific scoping form, allowing any...

Pentest-Muse-Cli - AI Assistant Tailored For Cybersecurity Professionals

Pentest Muse is an AI assistant tailored for cybersecurity professionals. It can help penetration testers brainstorm ideas, write payloads, analyze code, and perform reconnaissance. It can also take actions, execute command line codes, and iteratively solve complex tasks. Pentest Muse Web App In...

HackerOne: "package_name" can be set as desired when submitting a Pentest Opportunity form

Vulnerability description not provided...