Regular Expression without Anchors

Overview Affected versions of this package are vulnerable to Regular Expression without Anchors through the alloworiginpat checks in websocket.py, login.py. An attacker can bypass CORS, WebSocket origin checks, and login redirect validation by supplying an Origin or Referer value that matches the...

LockBit, Qilin, and DragonForce Join Forces to Dominate the Ransomware Ecosystem

Three prominent ransomware groups DragonForce, LockBit, and Qilin have announced a new strategic ransomware alliance, once underscoring continued shifts in the cyber threat landscape. The coalition is seen as an attempt on the part of the financially motivated threat actors to conduct more...

Information leakage vulnerability in FESCO's HR sharing service platform

Beijing Foreign Enterprise Human Resource Service Co., Ltd. is a company that provides human resource services to foreign representative offices in China, foreign financial institutions and economic organizations. An information leakage vulnerability exists in the FESCO human resources sharing...