MAL-2023-6796 Malicious code in selfvmminehttp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 284c8447c796dcc3736118932e30af5057f0ec1b5715b98339d3f591fa32002f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5552 Malicious code in py-raminteled (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 94a5c9d8fdfe8ba3edf18b06bc13669b6ef9eb87f1421da13b0d3dd388c407b9 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3006 Malicious code in esqinthackednvidia (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5fc346264c79f91aaf074dd1bdf81f5af9caf0ca78357cd7a04651276b491457 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6496 Malicious code in selfprooframad (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4a3c9cfa5e2b11966763bc01121c5433e6ca9634585e3f5ce6b147a15597b533 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4491 Malicious code in libreurlping (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx a992ff480c266905105462eda72b1fcaf7429ba320250e0a3665cce59d3d46b2 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3289 Malicious code in esqpycraftpost (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6a603cf288520ea30f3f82613af7c2ab5ac6a264df85fe0a5b92b61a0e409c96 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6194 Malicious code in selfinfocvgame (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 4025c4e397b4b9bea1405986b6d3dba1d05e800d8f3b087a1f330d52441d464b EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3444 Malicious code in esqstrsplitmask (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 05b600bd6debed3817b65a67771f83bcba11cad9982ad130b1737c3f9ad0e91a EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

WordPress WP Meta SEO Plugin <= 4.5.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Meta SEO Type Plugin Vulnerable versions = 4.5.3 Fixed in 4.5.4 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-1029 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID e41d91f1ddfe Credits Marco Wotschka Required...

WordPress Simple Slug Translate Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)

Software Simple Slug Translate Type Plugin Vulnerable versions = 2.7.2 Fixed in 2.7.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-26515 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID a353ffb7160f Credits yuyudhn Required...

WordPress Dashboard Widgets Suite Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Dashboard Widgets Suite Type Plugin Vulnerable versions = 3.2.1 Fixed in 3.2.2 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-26517 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID b0d81df240e3 Credits Rio Darmawan...

WordPress All In One SEO Pack Plugin <= 4.2.9 is vulnerable to Cross Site Scripting (XSS)

Software All In One SEO Pack Type Plugin Vulnerable versions = 4.2.9 Fixed in 4.3.0 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0586 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 5d5ff254df57 Credits Ivan Kuzymchak...

WordPress Coupon Zen Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)

Software Coupon Zen Type Plugin Vulnerable versions = 1.0.5 Fixed in 1.0.6 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6059f6769c37 Credits WordFence Required privilege...

MAL-2023-4397 Malicious code in libpushintpong (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1675e5d330eccdd419b14df2cd6a1d06edc09a0139276575bd00be219e0783c0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3483 Malicious code in esqtoolpoststr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx dcf0a6a26bdfce629d82e61abbb9d442bb764794f6c8a815a3eb7cdb137c1f0d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3038 Malicious code in esqkillurlcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9924c53515c7f0c8f7a741298949dbce1245ba51fc114360d41494e7410981af EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3305 Malicious code in esqpywlibencode (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 76ad99e2aca9915407e4987e9a3ccfea57df22569b1aff1db0f13fe64a6f930d EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3088 Malicious code in esqmaskpepgui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 026cf80adf9c24c7bc7b10bb8ef7198178de253ed0ad51ec6e4f350bacbacb5f EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5579 Malicious code in py-randomsplitram (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 756a3c231c4740c688f17537437db8b9b320384491b9538059c40ff516c4e0f9 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-6769 Malicious code in selfvisacontrolcraft (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 74142c59400f26ddc56ff01795940f8019c760e6e0f2693818015bf397a6e5ac EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...