Lucene search
+L

743 matches found

Github Security Blog
Github Security Blog
added 2024/11/05 3:18 p.m.34 views

Osmedeus Web Server Vulnerable to Stored XSS, Leading to RCE

Summary XSS occurs on the Osmedues web server when viewing results from the workflow, allowing commands to be executed on the server. Details When using a workflow that contains the summary module, it generates reports in HTML and Markdown formats. The default report is based on the...

8.7CVSS6AI score0.0044EPSS
SaveExploits0References4Affected Software1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/02 9:16 a.m.5 views

Malicious code in spider-ai (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aaeb144e288d0288f6013d64f0e9e57164e5c3eded3924fd2282577b59c28f1a Every time the user sends a message to the AI, the user IP, message as well as the response are exfiltrated to a hardcoded telegram channel. This behaviour is...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/10/02 9:16 a.m.5 views

Malicious code in spy-ai (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d71096c3aa8cb143ba7fab208ab313a240e8f1f9846b17b947a01f729fc1864a Every time the user sends a message to the AI, the user IP, message as well as the response are exfiltrated to a hardcoded telegram channel. This behaviour is...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2024/10/02 9:16 a.m.6 views

MAL-2024-12351 Malicious code in spy-ai (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d71096c3aa8cb143ba7fab208ab313a240e8f1f9846b17b947a01f729fc1864a Every time the user sends a message to the AI, the user IP, message as well as the response are exfiltrated to a hardcoded telegram channel. This behaviour is...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2024/10/02 9:16 a.m.6 views

MAL-2024-12348 Malicious code in spiderai (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 cfee8e74f278d45135c11ee4ff3f18180cb2423e333934a8ba994f5e8ec48b9a Every time the user sends a message to the AI, the user IP, message as well as the response are exfiltrated to a hardcoded telegram channel. This behaviour is...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2024/10/02 9:16 a.m.7 views

MAL-2024-11712 Malicious code in spider-ai (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 aaeb144e288d0288f6013d64f0e9e57164e5c3eded3924fd2282577b59c28f1a Every time the user sends a message to the AI, the user IP, message as well as the response are exfiltrated to a hardcoded telegram channel. This behaviour is...

6.8AI score
SaveExploits0References1
GithubExploit
GithubExploit
added 2024/09/07 6:1 a.m.82 views

Exploit for Code Injection in Ssssssss Spider-Flow

CVE-2024-0195 Improper Control of Generation of Code 'Code In...

9.8CVSS7.3AI score0.19403EPSS
SaveExploits4
GithubExploit
GithubExploit
added 2024/08/31 7:37 a.m.132 views

Exploit for Code Injection in Ssssssss Spider-Flow

CVE-2024-0195 Improper Control of Generation of Code 'Code In...

9.8CVSS7.3AI score0.19403EPSS
SaveExploits4
The Hacker News
The Hacker News
added 2024/08/15 10:45 a.m.30 views

RansomHub Group Deploys New EDR-Killing Tool in Latest Cyber Attacks

A cybercrime group with links to the RansomHub ransomware has been observed using a new tool designed to terminate endpoint detection and response EDR software on compromised hosts, joining the likes of other similar programs like AuKill aka AvNeutralizer and Terminator. The EDR-killing utility h...

7.7AI score
SaveExploits0
Schneier on Security
Schneier on Security
added 2024/07/22 11:6 a.m.10 views

Snake Mimics a Spider

This is a fantastic video. Its an Iranian spider-tailed horned viper Pseudocerastes urarachnoides. Its tail looks like a spider, which the snake uses to fool passing birds looking for a meal...

7.3AI score
SaveExploits0
The Hacker News
The Hacker News
added 2024/07/17 5:50 a.m.23 views

Scattered Spider Adopts RansomHub and Qilin Ransomware for Cyber Attacks

The infamous cybercrime group known as Scattered Spider has incorporated ransomware strains such as RansomHub and Qilin into its arsenal, Microsoft has revealed. Scattered Spider is the designation given to a threat actor that's known for its sophisticated social engineering schemes to breach...

7.2AI score
SaveExploits0
Gitee
Gitee
added 2024/06/29 11:34 a.m.74 views

vulSystem

This repository appears to be a collection of tools and scripts for web scraping and data collection, likely used for research or analysis purposes. The tools are written in Python and utilize various libraries such as BeautifulSoup and requests. The repository contains several scripts, including...

6.9AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:52 p.m.3 views

Malicious code in spider-monkey (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSV
OSV
added 2024/06/25 1:52 p.m.9 views

MAL-2024-7027 Malicious code in spider-monkey (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:52 p.m.7 views

Malicious code in spider-html (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSV
OSV
added 2024/06/25 1:52 p.m.7 views

MAL-2024-7025 Malicious code in spider-bot (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSV
OSV
added 2024/06/25 1:52 p.m.8 views

MAL-2024-7026 Malicious code in spider-html (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:52 p.m.7 views

Malicious code in spider-bot (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:52 p.m.4 views

Malicious code in speed-spider (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
OSV
OSV
added 2024/06/25 1:52 p.m.8 views

MAL-2024-7024 Malicious code in speed-spider (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

5.3AI score
SaveExploits0References1
Rows per page
Query Builder