Lucene search
+L

2135 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/12/31 2:49 p.m.•11 views

Malicious code in aiogrem (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2429ae6fbbf21c43b0bb5cc9a1ed320a2b7df0433adac380ec5902508727bc98 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

7.1AI score
SaveExploits0References2
OSV
OSV
•added 2025/12/31 2:49 p.m.•10 views

MAL-2025-193007 Malicious code in aiogrem (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 2429ae6fbbf21c43b0bb5cc9a1ed320a2b7df0433adac380ec5902508727bc98 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

7AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/12/31 11:49 a.m.•25 views

Malicious code in pyrogrem (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 42a10da9545ede038913b53b3619d36a94708a854536263f6a97c5d4d30a9b65 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

7.1AI score
SaveExploits0References2
OSV
OSV
•added 2025/12/31 11:49 a.m.•15 views

MAL-2025-192991 Malicious code in pyrogrem (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 42a10da9545ede038913b53b3619d36a94708a854536263f6a97c5d4d30a9b65 The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

7AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/12/31 12:00 a.m.•20 views

PT-2025-54333

Name of the Vulnerable Software and Affected Versions Mohammed Kaludi Core Web Vitals & PageSpeed Booster versions through 1.0.27 Description The software contains a missing authorization issue stemming from incorrectly configured access control security levels. Recommendations Update Mohammed...

5.4CVSS6.5AI score0.00178EPSS
SaveExploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/12/26 8:04 p.m.•22 views

Malicious code in telebot-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ae13454f920b5cce1011546e4802ed263ce8218d4b484ef8471142abb42c3f3e The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

7.1AI score
SaveExploits0References2
OSV
OSV
•added 2025/12/26 8:04 p.m.•14 views

MAL-2025-192942 Malicious code in telebot-bot (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ae13454f920b5cce1011546e4802ed263ce8218d4b484ef8471142abb42c3f3e The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

7AI score
SaveExploits0References2
OSV
OSV
•added 2025/12/26 8:03 p.m.•49 views

MAL-2025-192943 Malicious code in telegrem (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 f2186dc29d07dc851d756bae0b5d080ebe5923efe6654fdb4aa9ec55bbba9b6a The package, distinguished as a speed testing or typosquatted Telegram library, contains a Telegram bot to perform remote control of the computer --- Category:...

7AI score
SaveExploits0References2
OSV
OSV
•added 2025/12/24 11:15 a.m.•13 views

UBUNTU-CVE-2022-50708

In the Linux kernel, the following vulnerability has been resolved: HSI: ssiprotocol: fix potential resource leak in ssippnopen ssippnopen claims the HSI client's port with hsiclaimport. When hsiregisterportevent gets some error and returns a negetive value, the HSI client's port should be releas...

5.6AI score0.00198EPSS
SaveExploits0References5
Packet Storm News
Packet Storm News
•added 2025/12/16 12:00 a.m.•17 views

Intrusion Detection in Internet of Vehicles Using Machine Learning

The Internet of Vehicles IoV has evolved modern transportation through enhanced connectivity and intelligent systems. However, this increased connectivity introduces critical vulnerabilities, making vehicles susceptible to cyber-attacks such Denial-ofService DoS and message spoofing. This project...

6.9AI score
SaveExploits0
hivepro
hivepro
•added 2025/12/12 8:40 p.m.•24 views

The 5 Stages of Continuous Threat Exposure Management

Attackers don’t care about your compliance reports or the sheer number of vulnerabilities you have. They look for a single, exploitable path to your most valuable assets. To defend effectively, you need to see your organization through their eyes. This is the core principle behind continuous thre...

6.8AI score
SaveExploits0
EUVD
EUVD
•added 2025/12/10 9:31 p.m.•21 views

EUVD-2020-30845

BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery vulnerability in the 'url' GET parameter of the Download Speed Test service. Attackers can specify external domains to bypass firewalls and perform network enumeration by forci...

6.9CVSS6.7AI score0.01119EPSS
SaveExploits0References6
NVD
NVD
•added 2025/12/10 9:16 p.m.•20 views

CVE-2020-36884

BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery vulnerability in the 'url' GET parameter of the Download Speed Test service. Attackers can specify external domains to bypass firewalls and perform network enumeration by forci...

6.9CVSS0.01119EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/12/10 8:47 p.m.•10 views

CVE-2020-36884 BrightSign Digital Signage Diagnostic Web Server 8.2.26 Unauthenticated SSRF

BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery vulnerability in the 'url' GET parameter of the Download Speed Test service. Attackers can specify external domains to bypass firewalls and perform network enumeration by forci...

6.9CVSS6.1AI score0.01119EPSS
SaveExploits0References5
Vivaldi Security Advisories
Vivaldi Security Advisories
•added 2025/12/10 11:48 a.m.•26 views

Minor update(3) for Vivaldi Android Browser 7.7

Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the second 7.7 minor update: RegressionTablet Does not...

8.8CVSS7.8AI score0.22327EPSS
SaveExploits10References1
CNNVD
CNNVD
•added 2025/12/10 12:00 a.m.•26 views

BrightSign Digital Signage Diagnostic Web Server 代码问题漏洞

BrightSign Digital Signage Diagnostic Web Server is a troubleshooting and configuration tool from BrightSign USA. A code issue vulnerability exists in BrightSign Digital Signage Diagnostic Web Server version 8.2.26 and earlier, which stems from a server-side request forgery in the url parameter o...

6.9CVSS6.9AI score0.01119EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2025/12/10 12:00 a.m.•29 views

PT-2025-50508

BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery vulnerability in the 'url' GET parameter of the Download Speed Test service. Attackers can specify external domains to bypass firewalls and perform network enumeration by forci...

6.9CVSS7.2AI score0.01119EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/10 12:00 a.m.•6 views

CVE-2020-36884: Server-Side Request Forgery (SSRF)

BrightSign Digital Signage Diagnostic Web Server 8.2.26 and less contains an unauthenticated server-side request forgery vulnerability in the 'url' GET parameter of the Download Speed Test service. Attackers can specify external domains to bypass firewalls and perform network enumeration by forci...

6.9CVSS6AI score0.01119EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/12/06 9:31 a.m.•21 views

EUVD-2025-201539

The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the getcachedirforpagefromurl function in all versions up to, and including, 2.32.7. This makes it possible for...

9.6CVSS5.3AI score0.00505EPSS
SaveExploits2References3
OSV
OSV
•added 2025/12/06 7:15 a.m.•16 views

CVE-2025-13377

The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in the getcachedirforpagefromurl function in all versions up to, and including, 2.32.7. This makes it possible for...

8.1CVSS5.9AI score0.00505EPSS
SaveExploits2References2
Rows per page
Query Builder