Researchers Uncover PyPI Package Hiding Malicious Code Behind Image File

[![Malicious PyPI Package](https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEiDKozAAVrzxcnQaY1nyeIo-yfxeHUDxcmpI3Behh3zOv7ZFFLHxBky2gkeEeCK27p6iknqlu3KL2Q0ukHsudjjZxrwBZUZPd1QwrPyg3aOMPqoT9b0A ...

Continue Reading
Q3-2022 API ThreatStats™ Report

The latest quarterly review and analysis of API vulnerabilities and exploits is in. Our initial take had us thinking it was smooth sailing for the state of API vulnerabilities in Q3—or was it jus ...

Continue Reading
CVE-2022-43753

A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Mod ...

Continue Reading
CVE-2022-31255

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterprise Mo ...

Continue Reading
CVE-2022-43754

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in spacewalk/Uyuni of SUSE Linux Enterprise Module for SUSE Manager Server 4.2, SUSE Linux Enterpr ...

Continue Reading
Warning: New Massive Malicious Campaigns Targeting Top Indian Banks’ Customers

[![Indian Bank Hacking](https://thehackernews.com/new-images/img/b/R29vZ2xl/AVvXsEipOou_PIjqMD9GwGMxORN6GR5WFa94FnSD78iOmg0ZTe8ijdPGh_z2IWA7nzikRe6rU7cIXbP4nq79TX82E5wogZPcRKDWVgFUtnqqek6nFXFUg6R9R0Sm ...

Continue Reading
Redwood is vulnerable to account takeover via dbAuth “forgot-password”

# Impact _What kind of vulnerability is it? Who is impacted?_ This is an API vulnerability in Redwood's [dbAuth], specifically the dbAuth forgot password feature: - only projects with the dbAuth "forg ...

Continue Reading
Redwood is vulnerable to account takeover via dbAuth “forgot-password”

# Impact _What kind of vulnerability is it? Who is impacted?_ This is an API vulnerability in Redwood's [dbAuth], specifically the dbAuth forgot password feature: - only projects with the dbAuth "forg ...

Continue Reading

Back to Main

Subscribe for the latest news: