1727 matches found
⚡ Weekly Recap: AI Skill Malware, 31Tbps DDoS, Notepad++ Hack, LLM Backdoors and More
Cyber threats are no longer coming from just malware or exploits. They’re showing up inside the tools, platforms, and ecosystems organizations use every day. As companies connect AI, cloud apps, developer tools, and communication systems, attackers are following those same paths. A clear pattern...
Pentesting-Portfolio
🔐 Pentesting Portfolio Colección personal de writeups detalla...
OnboardLite security vulnerabilities
OnboardLite is an open-source application developed by Hack@UCF. OnboardLite has a security vulnerability, which stems from a stored-xss vulnerability. This vulnerability could allow administrators to render the user’s Discord account when they attempt to migrate it in the dashboard...
CVE-2025-23713
Cross-Site Request Forgery CSRF vulnerability in artanik Hack me if you can hack-me-if-you-can allows Stored XSS.This issue affects Hack me if you can: from n/a through = 1.2...
Bitfinex Hack Convict Ilya Lichtenstein Released Early Under U.S. First Step Act
Ilya Lichtenstein, who was sentenced to prison last year for money laundering charges in connection with his role in the massive hack of cryptocurrency exchange Bitfinex in 2016, said he has been released early. In a post shared on X last week, the 38-year-old announced his release, crediting U.S...
ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More Stories
It's getting harder to tell where normal tech ends and malicious intent begins. Attackers are no longer just breaking in — they're blending in, hijacking everyday tools, trusted apps, and even AI assistants. What used to feel like clear-cut "hacker stories" now looks more like a mirror of the...
SimpleX Chat X Account Hacked, Fake Site Promotes Crypto Wallet Scam
SimpleX Chat’s X account hacked to promote fake crypto site urging users to connect wallets. Site mimicked official design to steal funds...
PT-2025-49392
New HTB video up - Editor machine Chained CVE-2024-24893 for the foothold and CVE-2024-32019 to get root. https://t.co/z1zRLuMttt commands: https://t.co/zZEPDE8xg0 HackTheBox OSCP pentesting editor https://t.co/opAGaJ4Evv...
Malicious code in nokire-namiresan2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cdbd25b3184b4baab31fab92a04102f7045310abdb21bfb6d06030d00589ca37 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in zul-lapis73-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 686a40e2a8aae9552a47efcefe02d7993a8cb2cacad36e3ad285256063ce4c16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Russia Arrests Meduza Stealer Developers After Government Hack
Russia arrests developers of the notorious Meduza Stealer MaaS operation. Learn how the group's ‘fatal error’ led to the crackdown on domestic cybercrime...
Gitbook
Personal Pentesting Knowledge Base 👋 Welcome! This reposit...
Fedora: Security Advisory (FEDORA-2025-af00197966)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malicious code in new-fifa-mobile-h-ack-working-2023-march (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30030a18d067ae234effc394f8cc8ca10823fbd78beed5b2fee67caf3549ff7a The package new-fifa-mobile-h-ack-working-2023-march was found to contain malicious code...
MAL-2025-48941 Malicious code in new-fifa-mobile-h-ack-working-2023-march (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 30030a18d067ae234effc394f8cc8ca10823fbd78beed5b2fee67caf3549ff7a The package new-fifa-mobile-h-ack-working-2023-march was found to contain malicious code...
MAL-2025-48942 Malicious code in new-pubg-mobile-h-ack-working-2023-march (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4912df0c391b76679bbc455c05663219019fffc89baf9a7d45f14c5e9e8b0cde The package new-pubg-mobile-h-ack-working-2023-march was found to contain malicious code...
Malicious code in new-cod-mobile-h-ack-working-2023-march (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eef6e06bec3c2593911ecfae523f2324500500664b97da7bf34487325352a09c The package new-cod-mobile-h-ack-working-2023-march was found to contain malicious code...
MAL-2025-48943 Malicious code in new-tiktok-h-ack-working-2023-march (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3257e6436c4ec191b344e85593e5bea0a9e5b8669151176a87eee554c53ca86 The package new-tiktok-h-ack-working-2023-march was found to contain malicious code...
