New Supply Chain Attack “Revival Hijack” Risks Massive PyPI Takeovers

JFrog's cybersecurity researchers have identified a new PyPI attack technique called "Revival Hijack," which exploits package deletion policies. Over 22,000 packages are at risk, potentially impacting thousands of users. Stay informed!...

Researchers Find Over 22,000 Removed PyPI Packages at Risk of Revival Hijack

A new supply chain attack technique targeting the Python Package Index PyPI registry has been exploited in the wild in an attempt to infiltrate downstream organizations. It has been codenamed Revival Hijack by software supply chain security firm JFrog, which said the attack method could be used t...

revivalantiques.com Cross Site Scripting vulnerability OBB-3921329

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Emotet Returns to Hit 100K Mailboxes Per Day

After a lull of nearly two months, the Emotet botnet has returned with updated payloads and a campaign that is hitting 100,000 targets per day. Emotet started life as a banking trojan in 2014 and has continually evolved to become a full-service threat-delivery mechanism. It can install a collecti...

You Can Jailbreak Your iPhone Again (But Maybe You Shouldn’t)

Apple reintroduced a previously fixed bug in iOS 12.4, which has led to a jailbreak revival...

revival-motors.com IFRAME Injection vulnerability

Open Bug Bounty ID: OBB-594387 Description| Value ---|--- Affected Website:| revival-motors.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Iframe Injection / CWE-79 CVSSv3 Score:| 6.1...

revivalminigolf.it XSS vulnerability

Vulnerable URL: http://www.revivalminigolf.it/cerca.php?sezione=sqlavanzata Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check...

Fake fax ushers in revival of a ransomware family

Note: Read our latest comprehensive report on ransomware: Ransomware 1H 2017 review: Global outbreaks reinforce the value of security hygiene. "Criminal case against you" is a message that may understandably cause panic. That’s what a recent spam campaign hopes happens, increasing the likelihood ...

revival-motors.com XSS vulnerability

Vulnerable URL: http://revival-motors.com/single-view.php?pid=%22%3E%3Cimg%20src=x%20onerror=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 12379410...

LANChat Pro Revival 1.666c UDP Processing Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/12439/info LANChat Pro Revival is reported prone to a remote denial of service vulnerability. It is reported that the issue presents itself when the vulnerable client processes a malformed UDP datagram. A remote attacker...

CVE-2005-0333

LANChat Pro Revival 1.666c allows remote attackers to cause a denial of service application crash via a malformed UDP packet...

LANChat Pro Revival 1.666c - UDP Processing Remote Denial of Service

source: https://www.securityfocus.com/bid/12439/info LANChat Pro Revival is reported prone to a remote denial of service vulnerability. It is reported that the issue presents itself when the vulnerable client processes a malformed UDP datagram. A remote attacker may exploit this vulnerability to...

LANChat Pro Revival 1.666c - UDP Processing Remote Denial of Service

LANChat Pro Revival 1.666c - UDP Processing Remote Denial of Service source: https://www.securityfocus.com/bid/12439/info LANChat Pro Revival is reported prone to a remote denial of service vulnerability. It is reported that the issue presents itself when the vulnerable client processes a malform...

CVE-2005-0333

CVE-2005-0333 affects LANChat Pro Revival 1.666c. A remote attacker can cause an application crash by sending a malformed UDP packet, per NVD entry. The available document set does not specify exploit status, affected versions beyond 1.666c, or a remediation/patch. The CVSS v2 base score is 5.0 (...