3 matches found
Malicious code in xayoub-xctxteam (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e150a2084afb57b865384c624d91da477fe2a6ac09e84640a4f831a4a9b48a56 On import xAyOuBXcTxTeaM, init.py automatically starts a Flask HTTP server bound to 0.0.0.0:50019 exposing /spam?uid=, /stop, and /status endpoints...
Network Of 7K Typo Squatting Domains Drives Huge Traffic To Spam Web Sites
A report from Websense finds that spammers are cleaning up on misspelled domain names for prominent sites. A network of such typo squatting sites is driving millions of visitors to a Web site controlled by the spammers, making it one of the most traffic sites on the Internet. The report, on...
USN-791-1: Moodle vulnerabilities
Thor Larholm discovered that PHPMailer, as used by Moodle, did not correctly escape email addresses. A local attacker with direct access to the Moodle database could exploit this to execute arbitrary commands as the web server user. CVE-2007-3215 Nigel McNie discovered that fetching https URLs di...