MAL-2025-29084 Malicious code in perturbation-mui-repository-apollo (npm)

The package perturbation-mui-repository-apollo was found to contain malicious code...

MAL-2025-33797 Malicious code in spotify-apollo-oss-site (npm)

The package spotify-apollo-oss-site was found to contain malicious code...

MAL-2025-20225 Malicious code in farout-apollo-comet-wavefunction (npm)

The package farout-apollo-comet-wavefunction was found to contain malicious code...

MAL-2025-25245 Malicious code in library-metalsmith-apollo-protractor (npm)

The package library-metalsmith-apollo-protractor was found to contain malicious code...

MAL-2025-14659 Malicious code in apollo-yakutsk-paleoanthropology-aurora (npm)

The package apollo-yakutsk-paleoanthropology-aurora was found to contain malicious code...

MAL-2025-39491 Malicious code in writable-apollo-command-cryptography (npm)

The package writable-apollo-command-cryptography was found to contain malicious code...

MAL-2025-17194 Malicious code in cluster-babel-apollo-cors (npm)

The package cluster-babel-apollo-cors was found to contain malicious code...

MAL-2025-29305 Malicious code in pino-pretty-webdriver-manager-apollo-init (npm)

The package pino-pretty-webdriver-manager-apollo-init was found to contain malicious code...

MAL-2025-33733 Malicious code in speleology-apollo-library-thuban (npm)

The package speleology-apollo-library-thuban was found to contain malicious code...

MAL-2025-25765 Malicious code in magellan-prompts-wormhole-apollo (npm)

The package magellan-prompts-wormhole-apollo was found to contain malicious code...

MAL-2025-31807 Malicious code in react-native-apollo-upload-client (npm)

The package react-native-apollo-upload-client was found to contain malicious code...

MAL-2025-41055 Malicious code in zooarchaeology-chalk-apollo-proxima (npm)

The package zooarchaeology-chalk-apollo-proxima was found to contain malicious code...

⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & More

Malware isn’t just trying to hide anymore—it’s trying to belong. We’re seeing code that talks like us, logs like us, even documents itself like a helpful teammate. Some threats now look more like developer tools than exploits. Others borrow trust from open-source platforms, or quietly build...

CVE-2025-53709

Secure-upload is a data submission service that validates single-use tokens when accepting submissions to channels. The service only installed on a small number of environments. Under specific circumstances, privileged users of secure-upload could have selected email templates not necessarily...

CVE-2025-5763

A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical. Affected by this vulnerability is the function subF3C8C of the file apollo. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public an...

Tenda CP3 注入漏洞

Tenda CP3 is a smart camera from Tenda, a Chinese company. A command injection vulnerability exists in Tenda CP3 version 11.10.00.2311090948, which stems from the failure of the function subF3C8C in the file apollo to correctly filter constructed command special characters, commands, and so on. A...

PT-2025-24101 · Tenda · Tenda Cp3

Name of the Vulnerable Software and Affected Versions: Tenda CP3 version 11.10.00.2311090948 Description: A critical issue has been found, affecting the function sub F3C8C of the file apollo, leading to command injection. The attack can be launched remotely. Recommendations: For Tenda CP3 version...

CVE-2025-5763: Improper Neutralization of Special Elements used in a Command

A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical. Affected by this vulnerability is the function subF3C8C of the file apollo. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public an...

The vulnerability of the Ribbon Communications Apollo 9608 platform, related to errors in privilege management, allows a perpetrator to influence the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Ribbon Communications Apollo 9608 optical transport network platform is related to errors in privilege management. Exploiting this vulnerability could allow an attacker to influence the confidentiality, integrity, and accessibility of the protected information...

The vulnerability of the Ribbon Communications Apollo 9608 platform, related to an uncontrolled element in the search process, allows a hacker to trigger a service failure.

The vulnerability of the Ribbon Communications Apollo 9608 optical transport network platform is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...