Known Vulnerabilities

Years-Old Apache Struts2 Vulnerability Downloaded 325K+ Times in the Past Week

Years-Old Apache Struts2 Vulnerability Downloaded 325K+ Times in the Past Week

| | CVE, Known Vulnerabilities, Security Research, Security Vulnerabilities, vulnerability, Vulnerability Disclosure, vulnerable components
Key Takeaways: ...
2024 Sonatype Blog
Bypassing picklescan: Sonatype discovers four vulnerabilities

Bypassing picklescan: Sonatype discovers four vulnerabilities

| | Artificial Intelligence, CVE, Known Vulnerabilities, Security Research, Security Vulnerabilities
Sonatype has discovered and disclosed four vulnerabilities in picklescan, a tool designed to help developers scan Python pickle files for malicious content. Pickle files, used for serializing and deserializing Python AI/ML models, ...
2024 Sonatype Blog

How Stolen Information Stealers are Fueling an Underground Market

| | cybercrime, DevZone, Known Vulnerabilities, PyPI
  ...
Sonatype Blog

Malicious ‘aptX’ Python Package Drops Meterpreter Shell, Deletes ‘netstat’

| | DevZone, FEATURED, Known Vulnerabilities, PyPI, python
  ...
Sonatype Blog

Caroling Through the Season: The Sounds of the 4shells

| | DevZone, Known Vulnerabilities, Log4Shell, spring4shell, Text4Shell
  ...
Sonatype Blog

Malware Monthly – November 2022

| | bind shell, DevZone, Known Vulnerabilities, Malware Monthly, malware prevention, PyPI, python, reverse shell
  ...
Sonatype Blog

What the OpenSSL Vulnerabilities Are…and Aren’t (CVE-2022-3786 & CVE-2022-3602)

| | DevZone, Known Vulnerabilities, OpenSSL Vulnerability, SBN News
  ...
Sonatype Blog