MAL-2023-7555 Malicious code in tpreplacecrafthacked (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 470674de312bb66574869dcdb3fc701255984f8d11fd6225c718b6d26be77dfe EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Deno 安全漏洞

Deno is open source a simple , modern and secure JavaScript and TypeScript runtime environment . It uses V8 and is built with Rust. A security vulnerability exists in Deno versions prior to 1.31.0, which stems from vulnerability to regular expression denial of service ReDoS attacks...

rangy 安全漏洞

rangy is a cross-browser JavaScript selection library. A security vulnerability exists in timdown rangy that stems from the presence of a prototype contamination vulnerability...

MAL-2023-431 Malicious code in fca-zaaraowo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f952d090291fe13fd7bf80cdc078a8d705cad8e2f02c922163e9a0adf3433b8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Cerebrate 安全漏洞

Cerebrate is an open source platform. Designed to act as an interconnection coordinator between trusted contact information providers and other security tools. A security vulnerability exists in Cerebrate version 1.12 that stems from not properly considering the organizationid when creating API...

IDOR on save email configuration leads to account takeover

Description An attacker with a low privileged account on the latest GLPI version could change other user´s email when saving his own user preferences. After that, if "Forgot password" is enabled via email, an attacker will be able to retrieve victim´s forgot password link to the modified email to...

K82679059: BIG-IP APM SSO vulnerability CVE-2016-3686

Security Advisory Description Cleartext SessionID is visible in URL query parameters under some conditions. CVE-2016-3686 Impact There is a theoretical risk that a user could obtain unauthorized access to the system, causing a security breach. Security Advisory Status F5 Product Development has...

Liima 安全漏洞

Liima is a Liima open source application. Allows you to manage the configuration of Java EE applications in an unlimited number of different environments in various versions, including automated deployment of these applications. A security vulnerability exists in versions prior to Liima 1.17.28...

GoDaddy Discloses Multi-Year Security Breach Causing Malware Installations and Source Code Theft

Web hosting services provider GoDaddy on Friday disclosed a multi-year security breach that enabled unknown threat actors to install malware and siphon source code related to some of its services. The company attributed the campaign to a "sophisticated and organized group targeting hosting...

SAP ERP 安全漏洞

SAP ERP is a series of software for ERP management from SAP, a German company. A security vulnerability exists in SAP ERP version 600. An attacker exploiting the vulnerability could view sensitive data...

Splunk 安全漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

Nextcloud 安全漏洞

Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Mail, which stems from an attacker being able to access mailboxes by obtaining the subject and first character...

Enigma, Vector, and TgToxic: The New Threats to Cryptocurrency Users

Suspected Russian threat actors have been targeting Eastern European users in the crypto industry with fake job opportunities as bait to install information-stealing malware on compromised hosts. The attackers "use several highly obfuscated and under-development custom loaders in order to infect...

DataHub 安全漏洞

DataHub is datahub-project open source metadata platform for a modern data stack. DataHub suffers from a security vulnerability that stems from the presence of an authentication bypass, which is exploited by an attacker to create a system account, leading to a compromise of the entire system...

Malicious code in ebautifulsoup4 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx aa52f4c2410a9205f2ec0b2f2e76cc51c0176488ca4e5a0d2074a9250a62b2d4 Attacker distributed 900+ malicious packages via PyPi, infecting local browsers with malicious extension to manipulate clipboard and replace crypto wallet...

SAMSUNG Cloud 安全漏洞

SAMSUNG Cloud is an application from the South Korean company Samsung SAMSUNG. It is used to provide a feature to save and view images. A security vulnerability exists in SAMSUNG Cloud prior to version 5.3.0.32, which stems from the presence of an Improper Access Control vulnerability that can be...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge that stems from the presence of a spoofing vulnerability...

CVE-2023-0706

The CVE-2023-0706 entry concerns SourceCodester Medical Certificate Generator App 1.0. The vulnerability lies in the manage_record.php functionality, where manipulating the id parameter leads to SQL injection. It can be exploited remotely without user interaction, potentially compromising confide...

Ravencoin 安全漏洞

Ravencoin is an experimental digital currency open-sourced by RavenProject that allows instant payments to anyone, anywhere in the world. A security vulnerability exists in Ravencoin Core 4.3.2.1 and earlier versions, which stems from an issue in src/wallet/wallet.cpp that can be exploited by an...

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips, which is caused by memory reuse after release. The following products are affected: MT6879, MT6895, MT6983...